VIP Exclusive
GIAC GRID Response and Industrial Defense VIP Exam III
GRID — The GIAC GRID (Response and Industrial Defense) certification is issued by GIAC/SANS Institute, associated with the ICS515 course; the exam consists of approximately 82 multiple-choice questions, a 3-hour time limit, and a 68% passing threshold, covering ICS/OT architecture, active defense, incident response, network security monitoring, and malware analysis in industrial environments.
29
Questions
180m
Time Limit
68.00%
To Pass
Question 1 of 29👑 VIP
During a network security monitoring (NSM) review of an oil refinery's OT network, an analyst notices that a field device is issuing Modbus Function Code 8 (Diagnostics) requests with sub-function code 0x0001 (Restart Communications Option) to multiple PLCs in rapid succession. The field device is not an engineering workstation and no maintenance window is scheduled. Which of the following BEST characterizes this activity and the appropriate immediate action?
Questions 2–29 and full explanations are VIP-exclusive.