Free Preparation Discussions
MENU
Eccouncil ICS-SCADA Exam Questions
- Topic 1: Introduction to ICS/SCADA Network Defense: This topic covers IT security model, ICS/SCADA security model, security posture, risk management, risk assessment and security policy.
- Topic 2: TCP/IP 101: Its primary focus is on TCP/IP network. This topic covers ICS/SCADA protocols, TCP/IP layering, TCP/IP protocol architecture, RFCs and STDs.
- Topic 3: Introduction to Hacking: It discusses scanning, footprinting, intelligence gathering, hacking methodology, exploitation, covering tracks, and enumeration.
- Topic 4: Vulnerability Management: System vulnerabilities, desktop vulnerabilities, CVE, ICS/SCADA vulnerability sites, ICS/SCADA vulnerability uniqueness, and challenges of vulnerability management within ICS/SCADA are its sub-topics.
- Topic 5: Standards and Regulations for Cybersecurity: It discusses ISO 27001, ICS/SCADA, NERC CIP, CFATS, ISA99, and NIST SP 800-82.
- Topic 6: Securing the ICS Network: This topic delves into physical security, monitoring, legacy machines, ISO roadmap, and vulnerability assessment.
- Topic 7: Bridging the Air Gap: It covers guard, Data diode, and next-generation firewalls.
- Topic 8: Introduction to Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS): The topic covers network node, advantages of IDS, and limitations of IDS.
Free Eccouncil ICS-SCADA Exam Actual Questions
Note: Premium Questions for ICS-SCADA were last updated On Jul. 27, 2025 (see below)
The vulnerability that led to the WannaCry ransomware infections affected which protocol?
WannaCry is a ransomware attack that spread rapidly across multiple computer networks in May 2017.
The vulnerability exploited by the WannaCry ransomware was in the Microsoft Windows implementation of the Server Message Block (SMB) protocol.
Specifically, the exploit, known as EternalBlue, targeted a flaw in the SMBv1 protocol. This flaw allowed the ransomware to spread within corporate networks without any user interaction, making it one of the fastest-spreading and most harmful cyberattacks at the time.
Reference
National Vulnerability Database, CVE-2017-0144: https://nvd.nist.gov/vuln/detail/CVE-2017-0144
What does the SPI within IPsec identify?
Within IPsec, the SPI (Security Parameter Index) is a critical component that uniquely identifies a Security Association (SA) for the IPsec session. The SPI is used in the IPsec headers to help the receiving party determine which SA has been agreed upon for processing the incoming packets. This identification is crucial for the proper operation and management of security policies applied to the encrypted data flows. Reference:
RFC 4301, 'Security Architecture for the Internet Protocol,' which discusses the structure and use of the SPI in IPsec communications.
What type of communication protocol does Modbus RTU use?
Modbus RTU (Remote Terminal Unit) is a communication protocol based on a master-slave architecture that uses serial communication. It is one of the earliest communication protocols developed for devices connected over serial lines. Modbus RTU packets are transmitted in a binary format over serial lines such as RS-485 or RS-232. Reference:
Modbus Organization, 'MODBUS over Serial Line Specification and Implementation Guide V1.02'.
Which of the following names represents inbound filtering?
Ingress filtering is a method used in network security to ensure that incoming packets are allowed or blocked based on a set of security rules.
This type of filtering is often implemented at the boundaries of networks to prevent unwanted or harmful traffic from entering a more secure internal network.
The term 'ingress' refers to traffic that is entering a network boundary, whereas 'egress' refers to traffic exiting a network.
Reference
Cisco Networking Academy Program: Network Security.
'Understanding Ingress and Egress Filtering,' Network Security Guidelines, TechNet.
Which of the IEC 62443 Security Levels is identified by a cybercrime/hacker target?
IEC 62443 is an international series of standards on Industrial communication networks and system security, specifically related to Industrial Automation and Control Systems (IACS). Within the IEC 62443 standards, Security Level 3 is defined as protection against deliberate or specialized intrusion. It is designed to safeguard against threats from skilled attackers (cybercriminals or hackers) targeting specific processes or operations within the industrial control system. Reference:
International Electrotechnical Commission, 'IEC 62443 Standards'.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Ahmed
18 days agoElbert
2 months agoValene
3 months agoSalina
4 months agoAlishia
5 months agoMartha
6 months agoLeonida
6 months agoAlpha
7 months agoJaney
7 months agoBurma
7 months agoMy
8 months agoIluminada
8 months agoRebbecca
8 months agoJules
9 months agoMalinda
9 months agoGerardo
10 months agoFrancoise
10 months agoEulah
10 months agoSanjuana
11 months agoTequila
11 months agoFranchesca
11 months agoHerminia
11 months agoEmerson
1 years agoDorthy
1 years agoJanna
1 years agoTresa
1 years agoCherry
1 years agoCharlesetta
1 years agoKirk
1 years agoJacki
1 years ago