Question 1

 What is the primary audience for Part 2-5 of the ISA/IEC 62443 Series - Policies & Procedures group of standards?

 A. Asset owners 
B. Service providers 
C. Product suppliers 
D. System integrators 

Show Answer

Question 2

 The ISA/IEC 62443 Profiles Group will include parts starting with which number?

A. 6-x 
B. 5-x 
C. 4-x 
D. 3-x 

Show Answer

Question 3

 If a system integrator is designing zones and conduits for an IACS network based on risk assessments, which part of the ISA/IEC 62443 standard guides this process?

 A. Part 1-3: System security conformance metrics 
B. Part 2-1: Establishing an IACS security program 
C. Part 3-2: Security risk assessment for system design 
D. Part 4-1: Secure product development lifecycle requirements 

Show Answer

Question 4

 Which part of the ISA/IEC 62443 series describes a methodology to develop quantitative metrics?

A. Part 1-2 
B. Part 1-3 
C. Part 2-1 
D. Part 3-2 

Show Answer

Question 5

Which of the following is a cause for the increase in attacks on IACS? Available Choices (select all choices that are correct)

 A. Use of proprietary communications protocols 
B. The move away from commercial off the shelf (COTS) systems, protocols, and networks 
C. Knowledge of exploits and tools readily available on the Internet 
D. Fewer personnel with system knowledge having access to IACS 

Show Answer

Question 6

Which statement is TRUE regarding Intrusion Detection Systems (IDS)? Available Choices (select all choices that are correct)

 A. Modern IDS recognize IACS devices by default. 
B. They are very inexpensive to design and deploy. 
C. They are effective against known vulnerabilities. 
D. They require a small amount of care and feeding 

Show Answer

Question 7

 What are the four documents that belong to the General category of the ISA-62443 (IEC 62443) series?

A. Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-3: Security program ratings; and Part 1-4: IACS security lifecycle and use cases 
B. Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-3: Security technologies for IACS; and Part 1-4: IACS security lifecycle and use cases
C. Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-3: System security conformance metrics; and Part 1-4: IACS security lifecycle and use cases
D. Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-3: System security conformance metrics; and Part 1-4: Security program requirements for IACS service providers 

Show Answer

Question 8

What.are the two elements of the risk analysis category of an IACS? Available Choices (select all choices that are correct)

 A. Risk evaluation and risk identification 
B. Business rationale and risk reduction and avoidance 
C. Business rationale and risk identification and classification 
D. Business recovery and risk elimination or mitigation 

Show Answer

Question 9

 Which standard is recognized as part of the NIST CSF Informative References?

 A. COBIT 5 
B. PCI DSS 
C. ISO 9001 
D. ISA/IEC 62443

Show Answer

Question 10

 What is a requirement for product security development lifecycles?

 A. Risk management 
B. Agile development 
C. Continuous integration 
D. Defense-in-depth strategy 

Show Answer