更新された2024年01月04日検証済み！ISA-IEC-62443問題集と解答で100%合格できる [Q54-Q69]

4/5 - (1 vote)

更新された2024年01月04日検証済み！ISA-IEC-62443問題集と解答で100%合格できる

2024年最新のの問題ISA-IEC-62443問題集を試そう！更新されたISA試験合格させます

54、At Layer 4 of the Open Systems Interconnection (OSI) model, what identifies the application that will handle a
packet inside a host?
Available Choices (select all choices that are correct)

ATCP/UDP application ID

A TCP/UDP host ID

ATCP/UDP port number

ATCP/UDP registry number

55、What is defined as the hardware and software components of an IACS?
Available Choices (select all choices that are correct)

COTS software and hardware

Electronic security

Control system

Cybersecuritv

56、Which of the following ISA-99 (IEC 62443) Reference Model levels is named correctly?
Available Choices (select all choices that are correct)

Level 1: Supervisory Control

Level 2: Quality Control

Level 3: Operations Management

Level 4: Process

57、Which of the following is an element of monitoring and improving a CSMS?
Available Choices (select all choices that are correct)

Increase in staff training and security awareness

Restricted access to the industrial control system to an as-needed basis

Significant changes in identified risk round in periodic reassessments

Review of system logs and other key data files

58、Which of the ISA 62443 standards focuses on the process of developing secure products?
Available Choices (select all choices that are correct)

62443-1-1

62443-3-2

62443-3-3

62443-4-1

59、What is a feature of an asymmetric key?
Available Choices (select all choices that are correct)

Uses a continuous stream

Uses different keys

Shares the same key OD.

Has lower network overhead

60、Which organization manages the ISASecure conformance certification program?
Available Choices (select all choices that are correct)

American Society for Industrial Security

Automation Federation

National Institute of Standards and Technology

Security Compliance Institute

61、Using the risk matrix below, what is the risk of a medium likelihood event with high consequence?

Option A

Option B

Option C

Option D

62、What are the three main components of the ISASecure Integrated Threat Analysis (ITA) Program?
Available Choices (select all choices that are correct)

Software development security assurance, functional security assessment, and communications
robustness testing

Software robustness security testing, functional software assessment assurance, and essential security
functionality assessment

Communications robustness testing, functional security assurance, and software robustness
communications

Communication speed, disaster recovery, and essential security functionality assessment

63、Which of the following can be employed as a barrier device in a segmented network?
Available Choices (select all choices that are correct)

Router

Unmanaged switch

VPN

Domain controller

64、What is the purpose of ISO/IEC 15408 (Common Criteria)?
Available Choices (select all choices that are correct)

To define a security management organization

To describe a process for risk management

To define a product development evaluation methodology

To describe what constitutes a secure product

65、Why is OPC Classic considered firewall unfriendly?
Available Choices (select all choices that are correct)

OPC Classic uses DCOM, which dynamically assigns any port between 1024 and 65535.

OPC Classic is allowed to use only port 80.

OPC Classic works with control devices from different manufacturers.

OPC Classic is an obsolete communication standard.

66、Which statement is TRUE reqardinq application of patches in an IACS environment?
Available Choices (select all choices that are correct)

Patches should be applied as soon as they are available.

Patches should be applied within one month of availability.

Patches never should be applied in an IACS environment.

Patches should be applied based on the organization’s risk assessment.

67、Which of the following PRIMARILY determines access privileges for user accounts?
Available Choices (select all choices that are correct)

Users’ desire for ease of use

Authorization security policy

Common practice

Technical capability

68、After receiving an approved patch from the JACS vendor, what is BEST practice for the asset owner to
follow?
vailable Choices (select all choices that are correct)

If a low priority, there is no need to apply the patch.

If a medium priority, schedule the installation within three months after receipt.

If a high priority, apply the patch at the first unscheduled outage.

If no problems are experienced with the current IACS, it is not necessary to apply the patch.

69、Which is the implementation of PROFIBUS over Ethernet for non-safetv-related communications?
Available Choices (select all choices that are correct)

PROFIBUS DP

PROFIBUS PA

PROFINET

PROF1SAFE

Loading …