VIP Exclusive
GIAC GRID Response and Industrial Defense VIP Exam II
GRID — The GIAC Response and Industrial Defense (GRID) certification is issued by GIAC and is associated with the SANS ICS515 course; the proctored exam contains 82 questions with a 2-hour time limit and a 67% passing score, covering ICS active defense, threat hunting, incident response, and industrial network security monitoring.
29
Questions
120m
Time Limit
67.00%
To Pass
Question 1 of 29👑 VIP
During a threat hunt in an oil refinery's OT network, an analyst captures the following Modbus/TCP exchange: a master sends Function Code 0x08 (Diagnostics) with Sub-function 0x0004 (Force Listen Only Mode) to a remote terminal unit (RTU). Normal operations do not use this sub-function. What is the most significant security implication of this traffic?
Questions 2–29 and full explanations are VIP-exclusive.