VIP Exclusive
GIAC GRID VIP Certification Exam
GRID — The GIAC Response and Industrial Defense (GRID) certification is issued by GIAC and is associated with the SANS ICS515 course; the real exam consists of approximately 75 questions in 2 hours with a 67% passing score, and covers ICS active defense, incident response, architecture, malware analysis, and threat intelligence in operational technology environments.
29
Questions
120m
Time Limit
67.00%
To Pass
Question 1 of 29👑 VIP
A threat hunter at a water treatment facility is reviewing packet captures from the operational technology (OT) network. She observes repeated Modbus function code 0x10 (Write Multiple Registers) messages from an engineering workstation to a PLC every 30 seconds, but the values being written change slightly each cycle. Normal operations call for this register to be written only during shift startup. Which of the following is the MOST appropriate immediate action?
Questions 2–29 and full explanations are VIP-exclusive.