ICS Security Cybersecurity Threats and Vulnerabilities 2

Question 1

What type of malware was specifically designed to target Siemens PLCs and disrupt Iranian nuclear centrifuges?

Accepted Answer

Stuxnet

Answer

Stuxnet was a sophisticated worm discovered in 2010 that targeted Siemens S7 PLCs controlling uranium enrichment centrifuges.

Question 2

Which attack technique involves an adversary manipulating sensor data sent to a control system to cause incorrect automated responses?

Accepted Answer

False data injection

Answer

False data injection attacks corrupt the integrity of sensor readings, causing control systems to make decisions based on manipulated inputs.

Question 3

What is 'island hopping' in the context of ICS attacks?

Accepted Answer

Using a less-secure partner or vendor network to pivot into the target ICS

Answer

Island hopping uses a target's trusted third-party suppliers or partners as an entry point to reach the primary ICS environment.

Question 4

The TRITON/TRISIS malware was notable because it specifically targeted which ICS component?

Accepted Answer

Safety Instrumented Systems (SIS)

Answer

TRITON targeted Schneider Electric Triconex Safety Instrumented Systems, aiming to disable safety shutdowns and enable physical damage.

Question 5

Which vulnerability category is most prevalent in legacy ICS environments due to the age of the installed equipment?

Accepted Answer

Unpatched software and firmware

Answer

Legacy ICS devices often run outdated firmware and OS versions that cannot be patched without disrupting operations, leaving known vulnerabilities unaddressed.

(ICS) Industrial Control Systems Security Certification Practice Test

(ICS) Industrial Control Systems Security Certification Practice Test

ICS Security Cybersecurity Threats and Vulnerabilities 2