IC34 ISA-IEC 62443 Cybersecurity Design Specialist v1.0
Question 1
Which tool is provided by the Center for Internet Security (CIS)?
- A. Kali
- B. Nipper
- C. OpenVAS
- D. CAT
Answer : D
Question 2
IACS firewalls generally have which unique capability?
- A. Knowledge of industrial protocols
- B. Built into the operating system/firmware
- C. Packet filtering and stateful inspection only
- D. Packet filters only
Answer : A
Question 3
The banner below is an example of which of the five Ds of security?
- A. Defeat
- B. Deny
- C. Detect
- D. Deter
Answer : D
Question 4
What is the purpose of cybersecurity robustness testing?
- A. To create a baseline and develop the user documentation
- B. To compare the “out-of-box” systems with the hardened IACS systems
- C. To verify the safety, reliability, and functionality of the hardened IACS systems
- D. To discover and identify the weaknesses and/or vulnerabilities in IACS and connected systems
Answer : D
Question 5
What are typical tasks that a network intrusion detection system (NIDS) performs?
- A. Monitor and analyze the internals of a single host.
- B. Monitor policy enforcement and conduct rootkit detection.
- C. Monitor and scan network traffic for suspicious activity.
- D. Monitor application activity, file changes, and system logs.
Answer : C
Question 6
What is a feature of the configuration assessment tool (CAT)?
- A. It can only assess one system at a time.
- B. It provides dashboard reporting capability.
- C. It is available to all users without restrictions.
- D. It only supports Windows operating systems.
Answer : B
Question 7
Center for Internet Security (CIS) benchmarks are available for versions of which OS?
- A. Google Chrome
- B. Mozilla Firefox
- C. Amazon Linux
- D. Dell Power Edge C4130 Server
Answer : C
Question 8
What is the role of physical security in Foundational Requirement (FR) 4?
- A. To enforce network segmentation
- B. To manage user access to systems
- C. To ensure data integrity inside the system
- D. To protect against data confidentiality
Answer : D
Question 9
Cryptography is used for which Foundational Requirement (FR)?
- A. FR 3 - System integrity (SI)
- B. FR 4 - Data confidentiality (DC)
- C. FR 6 - Timely response to events (TRE)
- D. FR 7 - Resource availability (RA)
Answer : B
Question 10
What mechanism does the session layer provide for managing sessions?
- A. Data compression
- B. Opening and closing
- C. Routing data packets
- D. Encrypting communication
Answer : B
Question 11
Where can guidance on Operating System (OS) hardening be obtained?
- A. NIST
- B. Microsoft
- C. Product Suppliers
- D. All of the above
Answer : D
Question 12
Which organization uses a simplified model of the OSI reference model?
- A. IEEE
- B. ITU
- C. IETF
- D. ISO
Answer : C
Question 13
Which default firewall rule always should be part of an IACS firewall configuration?
- A. Deny all.
- B. Deny port 80.
- C. Permit management from specific IP addresses only.
- D. Permit User Datagram Protocol (UDP)/Transmission Control Protocol (TCP) between IACS devices.
Answer : A
Question 14
What does AAA represent?
- A. Allow access always
- B. Active access authorization
- C. Active, authorization, and accounting
- D. Authentication, authorization, and accounting
Answer : D
Question 15
How can you know if a product supplier is meeting practice requirements and benchmarks?
- A. Their design methods
- B. Price versus features
- C. The maturity model CMMI-DEV
- D. Number of implemented component requirements
Answer : C