hardMultiple Select
CS0-003 Practice Question: A vulnerability scan of a segmented OT network…
A vulnerability scan of a segmented OT network must avoid disrupting fragile devices. Which controls are appropriate? (Choose two.)
⚠ Common exam trap
The CS0-004 exam often tests the misconception that scanning from random external hosts improves stealth or coverage, but in OT segmentation, the priority is avoiding disruption—not hiding the scan source.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use approved safe-check profiles or passive discovery where required
Safe-check profiles (e.g., Nessus 'safe checks' mode) disable active exploits and denial-of-service tests, while passive discovery (e.g., using NetFlow or SNMP traps) never sends packets to fragile OT devices. This prevents disruption to legacy PLCs, RTUs, or other industrial controllers that may crash under aggressive scanning.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use approved safe-check profiles or passive discovery where required
Why this is correct
Using approved safe-check profiles ensures that vulnerability scans are configured with non-intrusive settings specifically designed for sensitive OT equipment, minimizing the risk of operational disruption. Passive discovery methods, such as network traffic analysis, further reduce impact by observing system behavior without direct interaction, which is crucial for maintaining the stability and safety of critical industrial control systems.
- ✗
Scan from random external hosts
Why it's wrong here
Scanning from random external hosts introduces significant security and operational risks to a segmented OT network. Such uncontrolled access bypasses established security perimeters and could potentially expose critical industrial control systems to unauthorized entities, leading to unpredictable network behavior, system instability, or even safety hazards due to lack of oversight and proper authorization.
- ✗
Run aggressive exploit checks without approval
Why it's wrong here
Running aggressive exploit checks without prior approval is highly dangerous in an OT environment due to the inherent fragility and real-time operational demands of industrial control systems. These intrusive tests can trigger unexpected system shutdowns, disrupt critical processes, or even cause physical damage by exploiting vulnerabilities that may lead to uncontrolled equipment behavior, directly impacting safety and production continuity.
- ✓
Coordinate test windows and scope with OT owners
Why this is correct
Coordinating test windows and the precise scope with OT owners is paramount to ensure that vulnerability scanning activities do not interfere with critical production cycles or safety protocols. This collaboration allows for scheduling during planned downtime, understanding system criticality, and implementing necessary precautions, thereby preventing operational disruptions and maintaining the safety and reliability of industrial processes.
Go deeper
Related to this question
Learn chapter
Container Image Vulnerability Scanning
Key term
Vulnerability scan
A vulnerability scan is an automated process that checks systems, networks, and applications for known security weaknesses or misconfigurations.
Key term
Vulnerability
A vulnerability is a weakness in a system, network, or software that could be exploited by a threat to cause harm or unauthorized access.
About these practice questions
One of 701 original CS0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.