[Oct 27, 2023] Get Up-To-Date Real Exam Questions for ISA-IEC-62443 with New Materials [Q46-Q67]

5/5 - (1 vote)

[Oct 27, 2023] Get Up-To-Date Real Exam Questions for ISA-IEC-62443 with New Materials

Updated ISA-IEC-62443 Certification Exam Sample Questions

QUESTION 46
Which layer in the Open Systems Interconnection (OSI) model would include the use of the File Transfer
Protocol (FTP)?
Available Choices (select all choices that are correct)

Application layer

Data link layer

Session layer

Transport layer

QUESTION 47
What type of security level defines what a component or system is capable of meeting?
Available Choices (select all choices that are correct)

Capability security level

Achieved security level

Design security level

Target security level

QUESTION 48
Whose responsibility is it to determine the level of risk an organization is willing to tolerate?
Available Choices (select all choices that are correct)

Management

Legal Department

Operations Department

Safety Department

QUESTION 49
What does the abbreviation CSMS round in ISA 62443-2-1 represent?
Available Choices (select all choices that are correct)

Control System Management System

Control System Monitoring System

Cyber Security Management System

Cyber Security Monitoring System

QUESTION 50
What is the purpose of ISO/IEC 15408 (Common Criteria)?
Available Choices (select all choices that are correct)

To define a security management organization

To describe a process for risk management

To define a product development evaluation methodology

To describe what constitutes a secure product

QUESTION 51
Using the risk matrix below, what is the risk of a medium likelihood event with high consequence?

Option A

Option B

Option C

Option D

QUESTION 52
How many security levels are in the ISASecure certification program?
Available Choices (select all choices that are correct)

QUESTION 53
Which steps are part of implementing countermeasures?
Available Choices (select all choices that are correct)

Establish the risk tolerance and select common countermeasures.

Establish the risk tolerance and update the business continuity plan.

Select common countermeasures and update the business continuity plan.

Select common countermeasures and collaborate with stakeholders.

QUESTION 54
Which is a physical layer standard for serial communications between two or more devices?
Available Choices (select all choices that are correct)

RS232

RS235

RS432

RS435

QUESTION 55
Which is an important difference between IT systems and IACS?
Available Choices (select all choices that are correct)

The IACS security priority is integrity.

The IT security priority is availability.

IACS cybersecurity must address safety issues.

Routers are not used in IACS networks.

QUESTION 56
Which characteristic is MOST closely associated with the deployment of a demilitarized zone (DMZ)?
Available Choices (select all choices that are correct)

Level 4 systems must use the DMZ to communicate with Level 3 and below.

Level 0 can only interact with Level 1 through the firewall.

Internet access through the firewall is allowed.

Email is prevented, thereby mitigating the risk of phishing attempts.

QUESTION 57
Which activity is part of establishing policy, organization, and awareness?
Available Choices (select all choices that are correct)

Communicate policies.

Establish the risk tolerance.

Identify detailed vulnerabilities.

Implement countermeasures.

QUESTION 58
Which is the BEST practice when establishing security zones?
Available Choices (select all choices that are correct)

Security zones should contain assets that share common security requirements.

Security zones should align with physical network segments.

Assets within the same logical communication network should be in the same security zone.

All components in a large or complex system should be in the same security zone.

QUESTION 59
Which of the following is a recommended default rule for IACS firewalls?
Available Choices (select all choices that are correct)

Allow all traffic by default.

Allow IACS devices to access the Internet.

Allow traffic directly from the IACS network to the enterprise network.

Block all traffic by default.

QUESTION 60
Which is the PRIMARY objective when defining a security zone?
Available Choices (select all choices that are correct)

All assets in the zone must be from the same vendor.

All assets in the zone must share the same security requirements.

All assets in the zone must be at the same level in the Purdue model.

All assets in the zone must be physically located in the same area.

QUESTION 61
Which of the following is the BEST reason for periodic audits?
Available Choices (select all choices that are correct)

To confirm audit procedures

To meet regulations

To validate that security policies and procedures are performing

To adhere to a published or approved schedule

QUESTION 62
In which layer is the physical address assigned?
Available Choices (select all choices that are correct)

Layer 1

Layer 2

Layer 3

Layer 7

QUESTION 63
Which policies and procedures publication is titled Patch Manaqement in the IACS Environment?
Available Choices (select all choices that are correct)

ISA-TR62443-2-3

ISA-TR62443-1-4

ISA-62443-3-3

ISA-62443-4-2

QUESTION 64
Which is a PRIMARY reason why network security is important in IACS environments?
Available Choices (select all choices that are correct)

PLCs are inherently unreliable.

PLCs are programmed using ladder logic.

PLCs use serial or Ethernet communications methods.

PLCs under cyber attack can have costly and dangerous impacts.

QUESTION 65
Which of the following PRIMARILY determines access privileges for user accounts?
Available Choices (select all choices that are correct)

Users’ desire for ease of use

Authorization security policy

Common practice

Technical capability

QUESTION 66
Which of the following tools has the potential for serious disruption of a control network and should not be
used on a live system?
Available Choices (select all choices that are correct)

Remote desktop

Vulnerability scanner

FTP

Web browser

QUESTION 67
Which of the following is the BEST example of detection-in-depth best practices?
Available Choices (select all choices that are correct)

Firewalls and unexpected protocols being used

IDS sensors deployed within multiple zones in the production environment

Role-based access control and unusual data transfer patterns

Role-based access control and VPNs

Loading …