Free Preparation Discussions
MENU
Eccouncil ICS-SCADA Exam Questions
- Topic 1: Introduction to ICS/SCADA Network Defense: This topic covers IT security model, ICS/SCADA security model, security posture, risk management, risk assessment and security policy.
- Topic 2: TCP/IP 101: Its primary focus is on TCP/IP network. This topic covers ICS/SCADA protocols, TCP/IP layering, TCP/IP protocol architecture, RFCs and STDs.
- Topic 3: Introduction to Hacking: It discusses scanning, footprinting, intelligence gathering, hacking methodology, exploitation, covering tracks, and enumeration.
- Topic 4: Vulnerability Management: System vulnerabilities, desktop vulnerabilities, CVE, ICS/SCADA vulnerability sites, ICS/SCADA vulnerability uniqueness, and challenges of vulnerability management within ICS/SCADA are its sub-topics.
- Topic 5: Standards and Regulations for Cybersecurity: It discusses ISO 27001, ICS/SCADA, NERC CIP, CFATS, ISA99, and NIST SP 800-82.
- Topic 6: Securing the ICS Network: This topic delves into physical security, monitoring, legacy machines, ISO roadmap, and vulnerability assessment.
- Topic 7: Bridging the Air Gap: It covers guard, Data diode, and next-generation firewalls.
- Topic 8: Introduction to Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS): The topic covers network node, advantages of IDS, and limitations of IDS.
Free Eccouncil ICS-SCADA Exam Actual Questions
Note: Premium Questions for ICS-SCADA were last updated On Mar. 07, 2026 (see below)
What type of communication protocol does Modbus RTU use?
Modbus RTU (Remote Terminal Unit) is a communication protocol based on a master-slave architecture that uses serial communication. It is one of the earliest communication protocols developed for devices connected over serial lines. Modbus RTU packets are transmitted in a binary format over serial lines such as RS-485 or RS-232. Reference:
Modbus Organization, 'MODBUS over Serial Line Specification and Implementation Guide V1.02'.
A Virtual Private Network (VPN) requires how many Security Associations?
A Virtual Private Network (VPN) typically requires two Security Associations (SAs) for a secure communication session. One SA is used for inbound traffic, and the other for outbound traffic.
In the context of IPsec, which is often used to secure VPN connections, these two SAs facilitate the bidirectional secure exchange of packets in a VPN tunnel.
Each SA uniquely defines how traffic should be securely processed, including the encryption and authentication mechanisms. This ensures that data sent in one direction is handled independently from data sent in the opposite direction, maintaining the integrity and confidentiality of both communication streams.
Reference
'Understanding IPSec VPNs,' by Cisco Systems.
'IPsec Security Associations,' RFC 4301, Security Architecture for the Internet Protocol.
Which of the following is required to determine the correct Security Association?
To determine the correct Security Association (SA) in the context of IPsec, several elements are required:
SPI (Security Parameter Index): Uniquely identifies the SA.
Partner IP address: The address of the endpoint with which the SA is established.
Protocol: Specifies the type of security protocol used (e.g., AH or ESP). All these components collectively define and identify a specific SA for secure communication between parties. Reference:
RFC 4301, 'Security Architecture for the Internet Protocol'.
What share does the WannaCry ransomware use to connect with the target?
The WannaCry ransomware utilizes the $IPC (Inter-Process Communication) share to connect with and infect target machines. This hidden network share supports the operation of named pipes, which facilitates the communication necessary for WannaCry to execute its payload across networks. Reference:
CISA Analysis Report, 'WannaCry Ransomware'.
WannaCry ransomware uses the SMB (Server Message Block) protocol to propagate through networks and connect to target systems. Specifically, it exploits a vulnerability in SMBv1, known as EternalBlue (MS17-010).
IPC Share: The $IPC (Inter-Process Communication) share is a hidden administrative share used for inter-process communication. WannaCry uses this share to gain access to other machines on the network.
SMB Exploitation: By exploiting the SMB vulnerability, WannaCry can establish a connection to the $IPC share, allowing it to execute the payload on the target machine.
Propagation: Once connected, it deploys the DoublePulsar backdoor and then spreads the ransomware payload.
Given these details, the correct answer is $IPC.
Reference
'WannaCry Ransomware Attack,' Wikipedia, WannaCry.
'MS17-010: Security Update for Windows SMB Server,' Microsoft, MS17-010.
How many main score areas are there in the CVSS?2
The Common Vulnerability Scoring System (CVSS) is a framework for rating the severity of security vulnerabilities. CVSS provides three main score areas: Base, Temporal, and Environmental.
Base Score evaluates the intrinsic qualities of a vulnerability.
Temporal Score reflects the characteristics of a vulnerability that change over time.
Environmental Score considers the specific impact of the vulnerability on a particular organization, tailoring the Base and Temporal scores according to the importance of the affected IT asset. Reference:
FIRST, 'Common Vulnerability Scoring System v3.1: Specification Document'.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Freida
Merissa
7 days agoElfriede
18 days agoTien
25 days agoLonny
1 month agoJunita
1 month agoNida
2 months agoEmily
2 months agoMargart
2 months agoKent
2 months agoOdelia
3 months agoTom
3 months agoRaelene
3 months agoBrunilda
3 months agoJimmie
4 months agoElmer
4 months agoLura
4 months agoAdria
4 months agoEric
5 months agoLemuel
5 months agoLynsey
5 months agoCarisa
5 months agoDesmond
6 months agoCecily
6 months agoBrittni
6 months agoAhmed
8 months agoElbert
9 months agoValene
11 months agoSalina
12 months agoAlishia
1 year agoMartha
1 year agoLeonida
1 year agoAlpha
1 year agoJaney
1 year agoBurma
1 year agoMy
1 year agoIluminada
1 year agoRebbecca
1 year agoJules
1 year agoMalinda
1 year agoGerardo
1 year agoFrancoise
1 year agoEulah
1 year agoSanjuana
2 years agoTequila
2 years agoFranchesca
2 years agoHerminia
2 years agoEmerson
2 years agoDorthy
2 years agoJanna
2 years agoTresa
2 years agoCherry
2 years agoCharlesetta
2 years agoKirk
2 years agoJacki
2 years ago