ISA-IEC-62443 Practice Questions

A.  

Asset model

B.  

Zone model

C.  

Security level model

D.  

Reference architecture

A.  

Internal sabotage

B.  

Nation state

C.  

Insider threat

D.  

Random hacking

A.  

SP Element 1 — Processes for discovery of security anomalies

B.  

SP Element 2 — Asset inventory baseline

C.  

SP Element 4 — Component hardening and dedicated portable media

D.  

SP Element 7 — Incident handling and response

A.  

Modern IDS recognize IACS devices by default.

B.  

They are very inexpensive to design and deploy.

C.  

They are effective against known vulnerabilities.

D.  

They require a small amount of care and feeding

A.  

Standards

B.  

Regulations

C.  

Frameworks

D.  

Special Publications

A.  

Vector approaches eliminate the need for risk models.

B.  

Vector approaches are always more accurate than qualitative methods.

C.  

Vector values should be ignored if they do not match industry standards.

D.  

Vector values must align with the asset owner’s risk matrix and risk appetite.

A.  

LAN, portable media, and wireless

B.  

LAN, portable media, and hard drives

C.  

LAN, power source, and wireless O

D.  

D.  

LAN, WAN, and hard drive

A.  

SP Element 1 – Supply chain security

B.  

SP Element 2 – Change control

C.  

SP Element 7 – Logging and event reporting

D.  

SP Element 8 – Backup restoration

A.  

ISA-62443 (EC 62443)

B.  

NIST SP800-82

C.  

API 1164

D.  

D.  

A.  

They primarily target personal devices.

B.  

They focus solely on financial institutions.

C.  

They affect suppliers of essential services.

D.  

They lead to improved cybersecurity measures.