nerdexam
CompTIA

PT0-002 · Question #173

Which of the following assessment methods is MOST likely to cause harm to an ICS environment?

The correct answer is A. Active scanning. Active scanning is most likely to cause harm in an ICS (Industrial Control System) environment. ICS/SCADA systems frequently run on decades-old, proprietary hardware and firmware that was never designed to handle modern network traffic. An active scan (like an Nmap full-port or…

Information Gathering and Vulnerability Scanning

Question

Which of the following assessment methods is MOST likely to cause harm to an ICS environment?

Options

  • AActive scanning
  • BPing sweep
  • CProtocol reversing
  • DPacket analysis

How the community answered

(31 responses)
  • A
    55% (17)
  • B
    10% (3)
  • C
    6% (2)
  • D
    29% (9)

Explanation

Active scanning is most likely to cause harm in an ICS (Industrial Control System) environment. ICS/SCADA systems frequently run on decades-old, proprietary hardware and firmware that was never designed to handle modern network traffic. An active scan (like an Nmap full-port or version scan) sends bursts of packets that can overwhelm buffers, crash processes, or trip safety shutoffs on PLCs, RTUs, and HMIs - potentially causing physical damage or production outages. Ping sweeps (B) are lighter but still risky. Protocol reversing (C) and packet analysis (D) are passive techniques that only observe traffic and pose no direct harm to devices.

Topics

#ICS Security#Vulnerability Scanning#Penetration Testing Risks#OT Security

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice