IC34 ISA-IEC 62443 Cybersecurity Design Specialist

IC34 ISA-IEC 62443 Cybersecurity Design Specialist practice questions, page 3 of 4, with answer review and explanations.

Question 11

Network segmentation and DMZs belong to which Foundational Requirement?

  1. FR 3 - System integrity (SI)
  2. FR 4 - Data confidentiality (DC)
  3. FR 5 - Restricted Data Flow (RDF)
  4. FR 7 - Resource availability (RA)

Question 12

Who is accountable for the security of an IACS?

  1. The asset owner
  2. The product supplier
  3. The integration provider
  4. The maintenance provider

Question 13

Which of the following should be installed as a best practice for protecting IACS devices?

  1. A firewall with deep packet inspection capabilities
  2. A firewall rule allowing unrestricted traffic on ports 0 through 65,535
  3. Simple Network Management Protocol Version 1 (SNMPv1) with encryption enabled
  4. An intrusion detection system (IDS) with rate limiting turned on

Question 14

Which is a best practice for device hardening in an IACS?

  1. Ignore vendor-specific security guidance.
  2. Add network interfaces for ease of maintenance.
  3. Enable Hypertext Transfer Protocol (HTTP) access on port 80.
  4. Disable remote program changes on programmable logic controllers (PLCs).

Question 15

Which statement is TRUE with regards to network segments?

  1. There cannot be a router inside a zone.
  2. All assets have a different Subnet mask.
  3. A DMZ is a three-tier network segmentation.
  4. There can only be one (1) segment per zone.