ICS-SCADA Exam Questions and Answers

QUESTION: 11

In what default directory (fully qualified path) does nmap store scripts?

/usr/share/scripts
/ust/share/nmap/scripts
/usr/share/nmap
/opt

Answer(s): C

Explanation:

Nmap (Network Mapper) is a network scanning and security auditing tool. Scripts used by Nmap for performing different network discovery and security auditing tasks are stored in /usr/share/nmap/scripts. This directory contains a collection of scripts for NSE (Nmap Scripting Engine), which enables Nmap to perform additional networking tasks, often used for detecting vulnerabilities, misconfigurations, and security-related information about network services.

Reference:

Nmap documentation, "Nmap Scripting Engine (NSE)".

Reveal Solution Next Question

QUESTION: 12

Which of the registrars contains the information for the domain owners in South America?

AFRINIC
ARIN
LACNIC
RIPENCC

Answer(s): C

Explanation:

LACNIC (Latin American and Caribbean Network Information Centre) is the regional Internet registry for Latin America and parts of the Caribbean. It manages the allocation and registration of Internet number resources (such as IP addresses and AS numbers) within this region and maintains the registry of domain owners in South America.

Reference:

LACNIC official website, "About LACNIC".

Reveal Solution Next Question

QUESTION: 13

Which of the hacking methodology steps can be used to identify the applications and vendors used?

Enumeration
OSINT
Scanning
Surveillance

Answer(s): B

Explanation:

OSINT (Open Source Intelligence) refers to the collection and analysis of information gathered from public, freely available sources to be used in an intelligence context. In the context of hacking methodologies, OSINT can be used to identify applications and vendors employed by a target organization by analyzing publicly available data such as websites, code repositories, social media, and other internet-facing resources.

Reference:

Michael Bazzell, "Open Source Intelligence Techniques".

Reveal Solution Next Question

QUESTION: 14

Which of the following is a component of an IDS?

All of these
Respond
Detect
Monitor

Answer(s): A

Explanation:

An Intrusion Detection System (IDS) is designed to monitor network or system activities for malicious activities or policy violations and can perform several functions:
Monitor: Observing network traffic and system activities for unusual or suspicious behavior. Detect: Identifying potential security breaches including both known threats and unusual activities that could indicate new threats.
Respond: Executing pre-defined actions to address detected threats, which can include alerts or triggering automatic countermeasures.

Reference:

Cisco Systems, "Intrusion Detection Systems".

Reveal Solution Next Question

QUESTION: 15

Which of the IEC 62443 Security Levels is identified by a cybercrime/hacker target?

4
3
1
2

Answer(s): B

Explanation:

IEC 62443 is an international series of standards on Industrial communication networks and system security, specifically related to Industrial Automation and Control Systems (IACS). Within the IEC 62443 standards, Security Level 3 is defined as protection against deliberate or specialized intrusion. It is designed to safeguard against threats from skilled attackers (cybercriminals or hackers) targeting specific processes or operations within the industrial control system.

Reference:

International Electrotechnical Commission, "IEC 62443 Standards".

Reveal Solution Next Question

EC-Council ICS-SCADA Exam (page: 3) EC-Council ICS/SCADA Cyber Security Updated on: 07-Feb-2026

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

Reference:

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

EC-Council ICS-SCADA Exam (page: 3)
EC-Council ICS/SCADA Cyber Security
Updated on: 07-Feb-2026