(2023) ISA-IEC-62443 Dumps and Practice Test (90 Questions) [Q40-Q64]

4.5/5 - (2 votes)

(2023) ISA-IEC-62443 Dumps and Practice Test (90 Questions)

Guide (New 2023) Actual ISA ISA-IEC-62443 Exam Questions

QUESTION 40
What are the four main categories for documents in the ISA-62443 (IEC 62443) series?
Available Choices (select all choices that are correct)

General. Policies and Procedures. System, and Component

End-User, Integrator, Vendor, and Regulator

Assessment. Mitigation. Documentation, and Maintenance

People. Processes. Technology, and Training

QUESTION 41
Which of the following is the BEST reason for periodic audits?
Available Choices (select all choices that are correct)

To confirm audit procedures

To meet regulations

To validate that security policies and procedures are performing

To adhere to a published or approved schedule

QUESTION 42
What are the two sublayers of Layer 2?
Available Choices (select all choices that are correct)

HIDS and NIDS

LLC and MAC

OPC and DCOM

VLAN and VPN

QUESTION 43
Which is the BEST practice when establishing security zones?
Available Choices (select all choices that are correct)

Security zones should contain assets that share common security requirements.

Security zones should align with physical network segments.

Assets within the same logical communication network should be in the same security zone.

All components in a large or complex system should be in the same security zone.

QUESTION 44
Why is OPC Classic considered firewall unfriendly?
Available Choices (select all choices that are correct)

OPC Classic uses DCOM, which dynamically assigns any port between 1024 and 65535.

OPC Classic is allowed to use only port 80.

OPC Classic works with control devices from different manufacturers.

OPC Classic is an obsolete communication standard.

QUESTION 45
Which organization manages the ISASecure conformance certification program?
Available Choices (select all choices that are correct)

American Society for Industrial Security

Automation Federation

National Institute of Standards and Technology

Security Compliance Institute

QUESTION 46
Who must be included in a training and security awareness program?
Available Choices (select all choices that are correct)

Vendors and suppliers

Employees

All personnel

Temporary staff

QUESTION 47
How many security levels are in the ISASecure certification program?
Available Choices (select all choices that are correct)

QUESTION 48
Which type of cryptographic algorithms requires more than one key?
Available Choices (select all choices that are correct)

Block ciphers

Stream ciphers

Symmetric (private) key

Asymmetric (public) key

QUESTION 49
Which service does an Intrusion Detection System (IDS) provide?
Available Choices (select all choices that are correct)

It is the lock on the door for networks and computer systems.

It is effective against all vulnerabilities in networks and computer systems.

It blocks malicious activity in networks and computer systems.

It detects attempts to break into or misuse a computer system.

QUESTION 50
Which of the following is the BEST example of detection-in-depth best practices?
Available Choices (select all choices that are correct)

Firewalls and unexpected protocols being used

IDS sensors deployed within multiple zones in the production environment

Role-based access control and unusual data transfer patterns

Role-based access control and VPNs

QUESTION 51
What are the three main components of the ISASecure Integrated Threat Analysis (ITA) Program?
Available Choices (select all choices that are correct)

Software development security assurance, functional security assessment, and communications
robustness testing

Software robustness security testing, functional software assessment assurance, and essential security
functionality assessment

Communications robustness testing, functional security assurance, and software robustness
communications

Communication speed, disaster recovery, and essential security functionality assessment

QUESTION 52
Which of the following is an element of monitoring and improving a CSMS?
Available Choices (select all choices that are correct)

Increase in staff training and security awareness

Restricted access to the industrial control system to an as-needed basis

Significant changes in identified risk round in periodic reassessments

Review of system logs and other key data files

QUESTION 53
Which is the BEST deployment system for malicious code protection?
Available Choices (select all choices that are correct)

Network segmentation

IACS protocol converters

Application whitelistinq (AWL) OD.

Zones and conduits

QUESTION 54
Which of the following can be employed as a barrier device in a segmented network?
Available Choices (select all choices that are correct)

Router

Unmanaged switch

VPN

Domain controller

QUESTION 55
Which of the following refers to internal rules that govern how an organization protects critical system
resources?
Available Choices (select all choices that are correct)

Formal guidance

Legislation

Security policy
D- Code of conduct

QUESTION 56
Which of the following is an industry sector-specific standard?
Available Choices (select all choices that are correct)

ISA-62443 (EC 62443)

NIST SP800-82

API 1164

ISO 27001

QUESTION 57
Whose responsibility is it to determine the level of risk an organization is willing to tolerate?
Available Choices (select all choices that are correct)

Management

Legal Department

Operations Department

Safety Department

QUESTION 58
Which of the following is an example of separation of duties as a part of system development and
maintenance?
Available Choices (select all choices that are correct)

Changes are approved by one party and implemented by another.

Configuration settings are made by one party and self-reviewed using a checklist.

Developers write and then test their own code.

Design and implementation are performed by the same team.

QUESTION 59
After receiving an approved patch from the JACS vendor, what is BEST practice for the asset owner to
follow?
vailable Choices (select all choices that are correct)

If a low priority, there is no need to apply the patch.

If a medium priority, schedule the installation within three months after receipt.

If a high priority, apply the patch at the first unscheduled outage.

If no problems are experienced with the current IACS, it is not necessary to apply the patch.

QUESTION 60
What are the connections between security zones called?
Available Choices (select all choices that are correct)

Firewalls

Tunnels

Pathways

Conduits

QUESTION 61
Which of the following are the critical variables related to access control?
Available Choices (select all choices that are correct)

Reporting and monitoring

Account management and monitoring

Account management and password strength

Password strength and change frequency

QUESTION 62
What is defined as the hardware and software components of an IACS?
Available Choices (select all choices that are correct)

COTS software and hardware

Electronic security

Control system

Cybersecuritv

QUESTION 63
Electronic security, as defined in ANSI/ISA-99.00.01:2007. includes which of the following?
Available Choices (select all choices that are correct)

Security guidelines for the proper configuration of IACS computers and operating systems

Computers, networks, operating systems, applications, and other programmable configurable
components of the system

Personnel, policies, and procedures related to the security of computers, networks. PLCs, and other
programmable configurable components of the system

Security guidelines for the proper configuration of IACS PLCs and other programmable configurable
components of the system

QUESTION 64
What is the name of the missing layer in the Open Systems Interconnection (OSI) model shown below?