CPENT Iot And OT Exploitation Practice Question
An OT security analyst is reviewing network traffic on an industrial control system network and identifies DNP3 protocol packets. Which THREE of the following fields or functions are associated with the DNP3 protocol structure and security? (Choose THREE)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Application layer function codes specifying operations like Read, Write, Select, and Operate
DNP3 features application layer functions, object headers, and Secure Authentication extensions (IEC 62351-5) to prevent spoofing of control commands.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Application layer function codes specifying operations like Read, Write, Select, and Operate
Why this is correct
DNP3 utilizes function codes (e.g., Read=1, Write=2, Select=3, Operate=4) to manage station data and control relays.
- ✗
IEEE 802.11 WPA2 four-way handshake cryptographic parameters
Why it's wrong here
The 4-way handshake is specific to Wi-Fi security, not DNP3 industrial networks.
- ✓
Data link layer CRC error detection checksums embedded in data blocks
Why this is correct
DNP3 frames incorporate CRC checksums at the data link layer to ensure data integrity across serial and Ethernet links.
- ✗
HTTP Authorization Bearer tokens used for REST API authentication
Why it's wrong here
Bearer tokens are used in HTTP REST APIs, not within binary DNP3 industrial protocol frames.
- ✓
DNP3 Secure Authentication (SA) extensions designed to prevent unauthorized command injection and spoofing
Why this is correct
DNP3 Secure Authentication adds a challenge-response mechanism before critical control commands are executed.
About these practice questions
One of 274 original CPENT practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This CPENT practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CPENT exam.