ISA-IEC-62443 Practice Questions

A.  

Part 1-3: System security conformance metrics

B.  

Part 2-1: Establishing an IACS security program

C.  

Part 3-2: Security risk assessment for system design

D.  

Part 4-1: Secure product development lifecycle requirements

A.  

Security guidelines for the proper configuration of IACS computers and operating systems

B.  

Computers, networks, operating systems, applications, and other programmable configurable components of the system

C.  

Personnel, policies, and procedures related to the security of computers, networks. PLCs, and other programmable configurable components of the system

D.  

Security guidelines for the proper configuration of IACS PLCs and other programmable configurable components of the system

A.  

Many other elements in the CSMS

B.  

(Elements external to the CSMS

C.  

Only the Assessment element

D.  

Only the Risk ID element

A.  

It is the lock on the door for networks and computer systems.

B.  

It is effective against all vulnerabilities in networks and computer systems.

C.  

It blocks malicious activity in networks and computer systems.

D.  

It detects attempts to break into or misuse a computer system.

A.  

Layer 1

B.  

Layer 2

C.  

Layer 3

D.  

Layer 7

A.  

CSMS

B.  

SPRP

C.  

CSA

D.  

ERM

A.  

As a standalone system unrelated to other processes

B.  

Outsourcing all security responsibilities to third parties

C.  

By embedding it into organizational processes and the ISMS

D.  

Only focusing on technical controls without process integration

A.  

If a low priority, there is no need to apply the patch.

B.  

If a medium priority, schedule the installation within three months after receipt.

C.  

If a high priority, apply the patch at the first unscheduled outage.

D.  

If no problems are experienced with the current IACS, it is not necessary to apply the patch.

A.  

Budgeting

B.  

New technical controls

C.  

Organizational restructuring

D.  

Security incident exposing previously unknown risk.

A.  

To conduct periodic audits

B.  

To implement countermeasures

C.  

To assign a Target Security Level (SL-T)

D.  

To ensure the Achieved Security Level (SL-A) meets the Target Security Level (SL-T)