New ISA ISA-IEC-62443 Dumps & Questions Updated on 2024 [Q27-Q48] : Exams Labs Braindumps : http://blog.examslabs.com

NEW QUESTION 27
Which of the following is an industry sector-specific standard?
Available Choices (select all choices that are correct)

ISA-62443 (EC 62443)

NIST SP800-82

API 1164

ISO 27001

NEW QUESTION 28
Which is the BEST practice when establishing security zones?
Available Choices (select all choices that are correct)

Security zones should contain assets that share common security requirements.

Security zones should align with physical network segments.

Assets within the same logical communication network should be in the same security zone.

All components in a large or complex system should be in the same security zone.

NEW QUESTION 29
Which of the ISA 62443 standards focuses on the process of developing secure products?
Available Choices (select all choices that are correct)

62443-1-1

62443-3-2

62443-3-3

62443-4-1

NEW QUESTION 30
Using the risk matrix below, what is the risk of a medium likelihood event with high consequence?

Option A

Option B

Option C

Option D

NEW QUESTION 31
What do packet filter firewalls examine?
Available Choices (select all choices that are correct)

The packet structure and sequence

The relationships between packets in a session

Every incoming packet up to the application layer

Only the source, destination, and ports in the header of each packet

NEW QUESTION 32
Which of the following is the BEST reason for periodic audits?
Available Choices (select all choices that are correct)

To confirm audit procedures

To meet regulations

To validate that security policies and procedures are performing

To adhere to a published or approved schedule

NEW QUESTION 33
Which is one of the PRIMARY goals of providing a framework addressing secure product development
life-cycle requirements?
Available Choices (select all choices that are correct)

Aligned development process

Aligned needs of industrial users

Well-documented security policies and procedures

Defense-in-depth approach to designing

NEW QUESTION 34
Which of the following is an activity that should trigger a review of the CSMS?
Available Choices (select all choices that are correct)

Budgeting

New technical controls

Organizational restructuring

Security incident exposing previously unknown risk.

NEW QUESTION 35
Safety management staff are stakeholders of what security program development?
Available Choices (select all choices that are correct)

CSMS

SPRP

CSA

ERM

NEW QUESTION 36
Which of the following ISA-99 (IEC 62443) Reference Model levels is named correctly?
Available Choices (select all choices that are correct)

Level 1: Supervisory Control

Level 2: Quality Control

Level 3: Operations Management

Level 4: Process

NEW QUESTION 37
Which of the following is an example of separation of duties as a part of system development and
maintenance?
Available Choices (select all choices that are correct)

Changes are approved by one party and implemented by another.

Configuration settings are made by one party and self-reviewed using a checklist.

Developers write and then test their own code.

Design and implementation are performed by the same team.

NEW QUESTION 38
Which of the following is a recommended default rule for IACS firewalls?
Available Choices (select all choices that are correct)

Allow all traffic by default.

Allow IACS devices to access the Internet.

Allow traffic directly from the IACS network to the enterprise network.

Block all traffic by default.

NEW QUESTION 39
Which of the following is a trend that has caused a significant percentage of security vulnerabilities?
Available Choices (select all choices that are correct)

IACS developing into a network of air-gapped systems

IACS evolving into a number of closed proprietary systems

IACS using equipment designed for measurement and control

IACS becoming integrated with business and enterprise systems

NEW QUESTION 40
Which of the following is an element of security policy, organization, and awareness?
Available Choices (select all choices that are correct)

Product development requirements

Staff training and security awareness

Technical requirement assessment

Penetration testing

NEW QUESTION 41
Which of the following is a cause for the increase in attacks on IACS?
Available Choices (select all choices that are correct)

Use of proprietary communications protocols

The move away from commercial off the shelf (COTS) systems, protocols, and networks

Knowledge of exploits and tools readily available on the Internet

Fewer personnel with system knowledge having access to IACS

NEW QUESTION 42
Which is the implementation of PROFIBUS over Ethernet for non-safetv-related communications?
Available Choices (select all choices that are correct)

PROFIBUS DP

PROFIBUS PA

PROFINET

PROF1SAFE

NEW QUESTION 43
Which of the following is an element of monitoring and improving a CSMS?
Available Choices (select all choices that are correct)

Increase in staff training and security awareness

Restricted access to the industrial control system to an as-needed basis

Significant changes in identified risk round in periodic reassessments

Review of system logs and other key data files

NEW QUESTION 44
What is a commonly used protocol for managing secure data transmission over a Virtual Private Network
(VPN)?
Available Choices (select all choices that are correct)

HTTPS

IPSec

MPLS

SSH

NEW QUESTION 45
What type of security level defines what a component or system is capable of meeting?
Available Choices (select all choices that are correct)

Capability security level

Achieved security level

Design security level

Target security level

NEW QUESTION 46
Which organization manages the ISASecure conformance certification program?
Available Choices (select all choices that are correct)

American Society for Industrial Security

Automation Federation

National Institute of Standards and Technology

Security Compliance Institute

NEW QUESTION 47
Which steps are part of implementing countermeasures?
Available Choices (select all choices that are correct)

Establish the risk tolerance and select common countermeasures.

Establish the risk tolerance and update the business continuity plan.

Select common countermeasures and update the business continuity plan.

Select common countermeasures and collaborate with stakeholders.

NEW QUESTION 48
Which is a reason for
and physical security regulations meeting a mixed resistance?
Available Choices (select all choices that are correct)

Regulations are voluntary documents.

Regulations contain only informative elements.

Cybersecurity risks can best be managed individually and in isolation.

There are a limited number of enforced cybersecurity and physical security regulations.