ISA/IEC 62443 Standard Course IC32M

Electronic Security is defined as the actions required to protect critical systems, informational assets, unauthorized uses, denial of service, modifications, disclosure, loss of revenue, destruction, pretty much anything. A control system is defined as hardware and software components of an industrial automation and control system, IACS, or sometimes pronounced eye-axe. Then, cybersecurity is defined as measures taken to protect a computer or a computer system against unauthorized access or attacks.

True (A)

<p>It helps to represent the many layers of information in a network (B), It helps to understand how low-level transport mechanisms relate to your product design (C)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>LAN (A)</p> Signup and view all the answers

<p>Split flat networks into zones and conduits (A), Consider what is trusted or untrusted network (B), Use cryptography with virtual private networks (C), All of the above (D)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>The three common classes of firewalls are Packet Filter Firewall, Stateful Inspection Firewall, and Application Proxy and DPI Firewall. A Packet Filter Firewall examines only the headers of each packet of information (source, destination, function, port). It accepts or rejects packets based on Access Control Lists (ACLs). These firewalls are fast and cheap, but their functionality is limited. Administrators can create ACLs based on the IP address, protocols, and packet attributes. A Stateful Inspection Firewall tracks the relationships between packets in session by inspecting packet structure and sequence. These firewalls are relatively fast, flexible, and offer improved security, but they can be spoofed by an attacker. They can be either hardware-based (e.g. Cisco ASA, Tofino) or server-based (e.g. Checkpoint Firewall-1). Application Proxy and DPI firewalls operate at the application level. They act as an intermediary. These firewalls accept connections and requests from a client and then interpret the incoming data. This data is then re-issued to the target device. This class of firewall provides strong security; however, they are slower and process intensive.</p> Signup and view all the answers

<p>All of the above (D)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>Both A and B (B)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>Deploy an Intrusion Prevention System (IPS) with extreme care (A), Use enhanced IT/IDS signatures with SCADA IDS Signatures (B), Distribute deployment by installing NIDS at zone entry points (C), All of the above (D)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>Both A and B (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>An independent certification of IACS products that are robust against attack vectors and free from known vulnerabilities (B)</p> Signup and view all the answers

<p>True (A)</p> Signup and view all the answers

<p>False (B)</p> Signup and view all the answers

A set of standards aimed at securing industrial automation and control systems.

Vital for protecting control systems from unauthorized access and attacks.

Hardware and software components that monitor and control physical processes.

Actions taken to protect computer systems from cyber threats.

Overview of potential cyber threats facing an organization.

A security strategy that uses multiple layers of defense.

Malware that encrypts a victim's data and demands payment for access.

A series of standards for information security management.

Industrial Automation and Control Systems, including personnel, hardware, and software.

A weakness in a system that can be exploited by threats.

The property of a system that ensures it's operational and accessible.

A model for information security that includes Confidentiality, Integrity, and Availability.

Activities to manage and mitigate the impact of a cybersecurity incident.

The process of keeping software up to date to fix known vulnerabilities.

Understanding of security policies and threats among personnel.

The process of identifying, assessing, and controlling threats to an organization.

Malicious software designed to harm or exploit any programmable device.

Short tests at the end of each module to verify understanding.

A formula that assesses threat, vulnerability, and consequence.

Specifications for security features and capabilities for IACS.

The International Electrotechnical Commission, which develops international standards.

National Institute of Standards and Technology, agency for standards and guidelines.

Working together with other organizations to improve security.

A systematic examination of an organization's information security controls.

Misconceptions about cybersecurity in control systems.

Techniques used to identify and respond to security threats at various levels.

Dividing a network into segments to enhance security.

Commercial off-the-shelf products that can create security issues.

The evolving and complex landscape of threats in the digital world.