Online Questions – Valid Practice ISA-IEC-62443 Exam Dumps Test Questions [Q12-Q29]

4/5 - (1 vote)

Online Questions – Valid Practice ISA-IEC-62443 Exam Dumps Test Questions

100% Real ISA-IEC-62443 dumps – Brilliant ISA-IEC-62443 Exam Questions PDF

Q12. Within the National Institute of Standards and Technoloqv Cybersecuritv Framework v1.0 (NIST CSF), what
is the status of the ISA 62443 standards?
Available Choices (select all choices that are correct)

They are used as informative references.

They are used as normative references.

They are under consideration for future use.

They are not used.

Q13. Which of the following is a cause for the increase in attacks on IACS?
Available Choices (select all choices that are correct)

Use of proprietary communications protocols

The move away from commercial off the shelf (COTS) systems, protocols, and networks

Knowledge of exploits and tools readily available on the Internet

Fewer personnel with system knowledge having access to IACS

Q14. Which is a commonly used protocol for managing secure data transmission on the Internet?
Available Choices (select all choices that are correct)

Datagram Transport Layer Security (DTLS)

Microsoft Point-to-Point Encryption

Secure Telnet

Secure Sockets Layer

Q15. Who must be included in a training and security awareness program?
Available Choices (select all choices that are correct)

Vendors and suppliers

Employees

All personnel

Temporary staff

Q16. What is the name of the missing layer in the Open Systems Interconnection (OSI) model shown below?

Control

Protocol

Transport

User

Q17. Using the risk matrix below, what is the risk of a medium likelihood event with high consequence?

Option A

Option B

Option C

Option D

Q18. Which organization manages the ISASecure conformance certification program?
Available Choices (select all choices that are correct)

American Society for Industrial Security

Automation Federation

National Institute of Standards and Technology

Security Compliance Institute

Q19. Which is a physical layer standard for serial communications between two or more devices?
Available Choices (select all choices that are correct)

RS232

RS235

RS432

RS435

Q20. Which of the following is an element of monitoring and improving a CSMS?
Available Choices (select all choices that are correct)

Increase in staff training and security awareness

Restricted access to the industrial control system to an as-needed basis

Significant changes in identified risk round in periodic reassessments

Review of system logs and other key data files

Q21. Which activity is part of establishing policy, organization, and awareness?
Available Choices (select all choices that are correct)

Communicate policies.

Establish the risk tolerance.

Identify detailed vulnerabilities.

Implement countermeasures.

Q22. Which of the following is an example of separation of duties as a part of system development and
maintenance?
Available Choices (select all choices that are correct)

Changes are approved by one party and implemented by another.

Configuration settings are made by one party and self-reviewed using a checklist.

Developers write and then test their own code.

Design and implementation are performed by the same team.

Q23. Which analysis method is MOST frequently used as an input to a security risk assessment?
Available Choices (select all choices that are correct)

Failure Mode and Effects Analysis

Job Safety Analysis(JSA)

Process Hazard Analysis (PHA)

System Safety Analysis(SSA)

Q24. What are the connections between security zones called?
Available Choices (select all choices that are correct)

Firewalls

Tunnels

Pathways

Conduits

Q25. In an IACS system, a typical security conduit consists of which of the following assets?
Available Choices (select all choices that are correct)

Controllers, sensors, transmitters, and final control elements

Wiring, routers, switches, and network management devices

Ferrous, thickwall, and threaded conduit including raceways

Power lines, cabinet enclosures, and protective grounds

Q26. Which steps are included in the ISA/IEC 62443 assess phase?
Available Choices (select all choices that are correct)

Cybersecurity requirements specification and detailed cyber risk assessment

Cybersecurity requirements specification and allocation of IACS assets to zones and conduits

Detailed cyber risk assessment and cybersecurity maintenance, monitoring, and management of change

Allocation of IACS assets to zones and conduits, and detailed cyber risk assessment

Q27. Which is an important difference between IT systems and IACS?
Available Choices (select all choices that are correct)

The IACS security priority is integrity.

The IT security priority is availability.

IACS cybersecurity must address safety issues.

Routers are not used in IACS networks.

Q28. Electronic security, as defined in ANSI/ISA-99.00.01:2007. includes which of the following?
Available Choices (select all choices that are correct)

Security guidelines for the proper configuration of IACS computers and operating systems

Computers, networks, operating systems, applications, and other programmable configurable
components of the system

Personnel, policies, and procedures related to the security of computers, networks. PLCs, and other
programmable configurable components of the system

Security guidelines for the proper configuration of IACS PLCs and other programmable configurable
components of the system

Q29. What are the two sublayers of Layer 2?
Available Choices (select all choices that are correct)

HIDS and NIDS

LLC and MAC

OPC and DCOM

VLAN and VPN

Loading …

ISA-IEC-62443 Exam PDF [2023] Tests Free Updated Today with Correct 90 Questions: https://www.real4dumps.com/ISA-IEC-62443_examcollection.html

Online Questions – Valid Practice ISA-IEC-62443 Exam Dumps Test Questions [Q12-Q29]

Leave a Reply Cancel reply