Cybersecurity Fundamentals Specialist Practice Test

Cybersecurity Fundamentals Specialist Practice Test practice questions, page 7 of 9, with answer review and explanations.

Question 31

Who must be included in a training and security awareness program?

  1. Vendors and suppliers
  2. Employees
  3. All personnel
  4. Temporary staff

Question 32

Which communications system covers a large geographic area?

  1. Campus Area Network (CAN)
  2. Local Area Network (LAN)
  3. Storage Area Network (SAN)
  4. Wide Area Network (WAN)

Question 33

Which is the PRIMARY reason why Modbus over Ethernet is easy to manage in a firewall?

  1. Modbus uses a single master to communicate with multiple slaves using simple commands.
  2. Modbus is a proprietary protocol that is widely supported by vendors.
  3. Modbus uses explicit source and destination IP addresses and a single known TCP port.
  4. Modbus has no known security vulnerabilities, so firewall rules are simple to implement.

Question 34

Which of the following is the BEST example of detection-in-depth best practices?

  1. Firewalls and unexpected protocols being used
  2. IDS sensors deployed within multiple zones in the production environment
  3. Role-based access control and unusual data transfer patterns
  4. Role-based access control and VPNs

Question 35

What are the four main categories for documents in the ISA-62443 (IEC 62443) series?

  1. General, Policies and Procedures, System, and Component
  2. End-User, Integrator, Vendor, and Regulator
  3. Assessment, Mitigation, Documentation, and Maintenance
  4. People, Processes, Technology, and Training