IEC 60870-5 protocol in SCADA systems - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding IEC 60870-5-101 Frame Structure

Which part of the IEC 60870-5-101 frame contains the control field that manages the communication commands?

A Address field

B Start character

C Control field

D Checksum field

💡 Hint

Think about which part tells the device what action to perform.

The control field in IEC 60870-5-101 frames carries commands and responses that manage the communication session.

💻 Command Output

intermediate

Output of IEC 60870-5-104 Connection Establishment Command

What is the expected response code from a server after receiving a valid STARTDT (Start Data Transfer) command in IEC 60870-5-104?

SCADA systems

Client sends: STARTDT (Start Data Transfer) command
Server responds:

A STARTDT CON (Confirmation) frame

B STOPDT (Stop Data Transfer) command

C TESTFR (Test Frame) command

D RESETDT (Reset Data Transfer) command

💡 Hint

The server must confirm the start of data transfer.

After receiving STARTDT, the server replies with STARTDT CON to confirm data transfer start.

❓ Troubleshoot

advanced

Diagnosing IEC 60870-5-101 Communication Failure

A SCADA master device repeatedly fails to receive responses from a slave device over IEC 60870-5-101. Which of the following is the most likely cause?

A Incorrect ASDU address configured on the master

B Checksum field missing in the master's frames

C Master device not sending TESTFR commands periodically

D Slave device sending STARTDT CON without receiving STARTDT

💡 Hint

Check frame integrity and error detection.

The checksum field ensures frame integrity. Missing checksum causes the slave to reject frames, leading to no response.

🔀 Workflow

advanced

Sequence of Commands for Data Transfer in IEC 60870-5-104

What is the correct sequence of commands exchanged between a client and server to start data transfer in IEC 60870-5-104?

A Client sends STARTDT, Server sends STARTDT CON

B Server sends STARTDT, Client sends STARTDT CON, Server sends TESTFR

C Client sends TESTFR, Server sends STARTDT, Client sends STARTDT CON

D Client sends STARTDT, Server sends STARTDT CON, Client sends TESTFR

💡 Hint

Focus on the minimal handshake to start data transfer.

The client initiates with STARTDT, and the server confirms with STARTDT CON. TESTFR is used later for link testing.

✅ Best Practice

expert

Best Practice for Secure IEC 60870-5-104 Communication

Which of the following is the best practice to enhance security when deploying IEC 60870-5-104 protocol in a critical SCADA network?

A Allow unrestricted access from any IP to improve availability

B Disable all authentication to reduce latency

C Use default port 2404 without firewall restrictions

D Use VPN tunnels to encrypt communication between client and server

💡 Hint

Think about protecting data in transit over networks.

Using VPN tunnels encrypts data and protects against interception, which is critical for SCADA security.

Practice

1. What is the primary purpose of the IEC 60870-5 protocol in SCADA systems?

easy

A. To encrypt data for secure internet browsing

B. To store historical data in databases

C. To enable communication between power system devices

D. To provide user interface design standards

Solution

1. Step 1: Understand the protocol's role

   IEC 60870-5 is designed for communication in power systems, connecting devices like RTUs and control centers.

2. Step 2: Eliminate unrelated options

   Options about databases, UI design, and internet encryption do not relate to device communication in power systems.

3. Final Answer:

   To enable communication between power system devices -> Option C

4. Quick Check:

   IEC 60870-5 = communication protocol [OK]

Hint: Remember: IEC 60870-5 connects power devices [OK]

Common Mistakes:

• Confusing communication protocol with data storage
• Thinking it handles user interface design
• Assuming it encrypts internet data

2. Which of the following is a correct characteristic of IEC 60870-5 protocol messages?

easy

A. They include structured fields for data and commands

B. They only support wireless communication

C. They use unstructured free text for data

D. They require manual data entry at each device

Solution

1. Step 1: Recall message format

   IEC 60870-5 messages have structured fields to clearly define data and commands.

2. Step 2: Check other options

   Unstructured text, wireless-only support, and manual data entry are incorrect for this protocol.

3. Final Answer:

   They include structured fields for data and commands -> Option A

4. Quick Check:

   Structured messages = They include structured fields for data and commands [OK]

Hint: Look for 'structured fields' in message descriptions [OK]

Common Mistakes:

• Assuming messages are free text
• Believing protocol only supports wireless
• Thinking manual entry is required

3. Given a device using IEC 60870-5-101 protocol, which communication method is it most likely using?

medium

A. Wireless Wi-Fi communication

B. Bluetooth low energy

C. Internet Protocol (IP) over Ethernet

D. Serial communication over RS-232 or RS-485

Solution

1. Step 1: Identify protocol version

   IEC 60870-5-101 is designed for serial communication using RS-232 or RS-485 interfaces.

2. Step 2: Compare options

   Wi-Fi, IP over Ethernet, and Bluetooth are not typical for 101 version; those relate more to 104 or other protocols.

3. Final Answer:

   Serial communication over RS-232 or RS-485 -> Option D

4. Quick Check:

   60870-5-101 = serial comm [OK]

Hint: 101 version means serial communication [OK]

Common Mistakes:

• Confusing 101 with 104 (network-based)
• Assuming wireless communication
• Selecting Ethernet/IP for 101

4. A SCADA engineer configures an IEC 60870-5-104 device but cannot establish communication. The device is set to use serial port settings. What is the likely issue?

medium

A. The serial port baud rate is too high for 104 protocol

B. The device should be configured for network (TCP/IP) communication, not serial

C. The device requires manual data entry to start communication

D. The IEC 60870-5-104 protocol does not support communication

Solution

1. Step 1: Understand protocol communication type

   IEC 60870-5-104 uses network communication over TCP/IP, not serial ports.

2. Step 2: Identify misconfiguration

   Configuring 104 device for serial communication causes failure; it must use network settings.

3. Final Answer:

   The device should be configured for network (TCP/IP) communication, not serial -> Option B

4. Quick Check:

   104 = network, not serial [OK]

Hint: 104 protocol requires TCP/IP network setup [OK]

Common Mistakes:

• Trying to use serial settings with 104
• Changing baud rate unnecessarily
• Thinking manual data entry is needed

5. You need to design a SCADA communication system that supports both serial and network devices using IEC 60870-5 protocols. Which approach best ensures compatibility?

hard

A. Use IEC 60870-5-101 for serial devices and IEC 60870-5-104 for network devices

B. Use only IEC 60870-5-104 for all devices regardless of connection type

C. Use IEC 60870-5-101 for network devices and IEC 60870-5-104 for serial devices

D. Use a custom protocol to replace IEC 60870-5 entirely

Solution

1. Step 1: Identify protocol roles

   IEC 60870-5-101 is designed for serial communication; 104 is designed for network (TCP/IP) communication.

2. Step 2: Match protocols to device types

   Using 101 for serial and 104 for network devices ensures compatibility and proper communication.

3. Step 3: Evaluate other options

   Using only 104 ignores serial devices; swapping roles is incorrect; custom protocol is unnecessary.

4. Final Answer:

   Use IEC 60870-5-101 for serial devices and IEC 60870-5-104 for network devices -> Option A

5. Quick Check:

   101 = serial, 104 = network [OK]

Hint: Match 101 to serial, 104 to network devices [OK]

Common Mistakes:

• Using 104 for serial devices
• Ignoring serial device support
• Trying to replace IEC 60870-5 unnecessarily