ICS SCADA & Industrial Protocol Security 1 — Questions and Answers
Question 1: What does SCADA stand for in the context of industrial control systems?
- Security Control And Data Acquisition
- Supervisory Control And Data Acquisition (Correct answer)
- System Command And Data Authorization
- Supervisory Command And Data Analysis
Correct answer: Supervisory Control And Data Acquisition
SCADA stands for Supervisory Control And Data Acquisition, referring to systems that monitor and control industrial infrastructure.
Question 2: Which protocol is most widely used in SCADA systems for communication between master stations and Remote Terminal Units (RTUs), particularly in electric utilities?
- Modbus RTU
- DNP3 (Correct answer)
- BACnet
- PROFIBUS
Correct answer: DNP3
DNP3 (Distributed Network Protocol 3) was designed specifically for SCADA communication with RTUs, especially in the electric power and water industries, and supports time-stamped data.
Question 3: A Programmable Logic Controller (PLC) is best described as:
- A network firewall designed for OT environments
- A software application for visualizing industrial data
- An industrial digital computer used to automate electromechanical processes (Correct answer)
- A communication gateway between IT and OT networks
Correct answer: An industrial digital computer used to automate electromechanical processes
A PLC is a ruggedized industrial computer that continuously monitors inputs from sensors and executes programmed logic to control outputs such as motors and valves.
Question 4: Which Modbus function code is used to read the values of holding registers?
- Function Code 01
- Function Code 03 (Correct answer)
- Function Code 05
- Function Code 15
Correct answer: Function Code 03
Modbus Function Code 03 (Read Holding Registers) is used to read the contents of a contiguous block of holding registers in a remote device.
Question 5: What is a Human-Machine Interface (HMI) in an ICS environment?
- A protocol for encrypted communications between PLCs
- A hardware device that bridges SCADA to the internet
- A dashboard providing operators a visual representation of industrial processes for monitoring and control (Correct answer)
- A firewall specifically designed for operational technology networks
Correct answer: A dashboard providing operators a visual representation of industrial processes for monitoring and control
An HMI is the operator interface that displays process data graphically, allowing operators to monitor system status and issue control commands.
Question 6: What is the primary security concern with legacy SCADA systems?
- They generate excessive log volumes that overwhelm SIEM systems
- They often lack built-in encryption and authentication because they were designed before cybersecurity was a concern (Correct answer)
- They use proprietary hardware that is too expensive to replace
- They cannot be monitored by modern security tools
Correct answer: They often lack built-in encryption and authentication because they were designed before cybersecurity was a concern
Legacy SCADA systems were designed decades ago with availability and reliability as priorities, predating modern cybersecurity practices, so they typically transmit data in plaintext with no authentication.
Question 7: Which industrial protocol is the standard for building automation systems, including HVAC, lighting, and access control?
- Modbus
- DNP3
- BACnet (Correct answer)
- PROFINET
Correct answer: BACnet
BACnet (Building Automation and Control Networks) is an ASHRAE/ISO/ANSI standard specifically developed for building automation and control systems.
ICS SCADA & Industrial Protocol Security 1
What does SCADA stand for in the context of industrial control systems?