ISA-IEC 62443 Cybersecurity Maintenance Specialist v1.0

Page:    1 / 7   
Exam contains 100 questions

Which document describes the requirements for a product developer's security lifecycle?

  • A. IEC 62443-2-1
  • B. IEC 62443-3-2
  • C. IEC 62443-4-1
  • D. IEC 62443-4-2


Answer : C

Devices with what kind of protocols should be included in the hardware inventory?

  • A. Only Ethernet
  • B. Routable serial protocols
  • C. Wireless protocols
  • D. None of the above


Answer : C

Which technology is NOT listed as an IACS remote access technology?

  • A. VPN
  • B. ISDN dial-up
  • C. Bluetooth
  • D. Remote access software


Answer : C

What should be included in a good checklist for post-incident analysis and forensics?

  • A. List of all users with remote access
  • B. List of people, processes, and technology involved in the incident
  • C. List of intrusion detection systems (IDSs), firewalls, and network devices impacted during the incident
  • D. Testing, auditing, and adjustment of pre-incident policy


Answer : B

What type of devices do IACS systems consist largely of?

  • A. Personal mobile devices only
  • B. Standard Windows desktop clients
  • C. Only cloud-hosted virtual machines
  • D. Non-Windows endpoints (embedded)


Answer : D

What is the PRIMARY cause of cyber-related production losses in process control systems?

  • A. Hardware failures
  • B. Malware related incidents
  • C. Human error
  • D. Network outages


Answer : C

Which Zone and Conduit Requirement (ZCR) is associated with performing a detailed cybersecurity risk assessment?

  • A. ZCR 7
  • B. ZCR 5
  • C. ZCR 3
  • D. ZCR 2


Answer : B

What type of alarms are included in physical security measures?

  • A. Fire alarms
  • B. Network alarms
  • C. Smoke detectors
  • D. Intrusion alarms


Answer : D

Which activity is NOT part of periodic cybersecurity audits?

  • A. Monitoring effectiveness of security controls
  • B. Performing internal audits
  • C. Conducting employee performance reviews
  • D. Undergoing external audits


Answer : C

Where is the recommended location for a dedicated antivirus server within a process control architecture?

  • A. At each network zone
  • B. Within the process control demilitarized zone (DMZ)
  • C. On an external (web) facing demilitarized zone (DMZ)
  • D. On the information technology (IT) side of the network


Answer : D

Which process ensures that systems can be accessed only by authorized users, programs, processes, or other systems?

  • A. Access control
  • B. User provisioning
  • C. System commissioning
  • D. Account management


Answer : A

Which is an asset inventory tool?

  • A. Patch management tool
  • B. Network management tool
  • C. Remote terminal unit (RTU) communication tool
  • D. Human-machine interface (HMI) configuration tool


Answer : B

Which is among the basic steps to hardening an operating system (OS)?

  • A. Configure the IACS firewall rules to deny all.
  • B. Install firmware updates on the network devices.
  • C. Reinstall all unnecessary services, applications, and network protocols.
  • D. Remove or disable unnecessary services, applications, and network protocols.


Answer : D

As per the European NIS Directive, what does the “duty to report” mean for operators of essential services?

  • A. Informing the competent authority of the incidents
  • B. Preparing risk assessments to prevent the incidents
  • C. Making sure that the incidents are properly documented
  • D. Informing the board of directors that the incidents are properly documented


Answer : A

Which reason BEST describes the need and importance of patch management?

  • A. Every new patch published by the IACS supplier must be applied.
  • B. Every vulnerability will require a patch from the supplier to block a potential attacker.
  • C. New vulnerabilities are discovered and published almost daily.
  • D. Patch management keeps the warranty from the supplier.


Answer : C

Page:    1 / 7   
Exam contains 100 questions

Talk to us!


Have any questions or issues ? Please dont hesitate to contact us

Certlibrary.com is owned by MBS Tech Limited: Room 1905 Nam Wo Hong Building, 148 Wing Lok Street, Sheung Wan, Hong Kong. Company registration number: 2310926
Certlibrary doesn't offer Real Microsoft Exam Questions. Certlibrary Materials do not contain actual questions and answers from Cisco's Certification Exams.
CFA Institute does not endorse, promote or warrant the accuracy or quality of Certlibrary. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Terms & Conditions | Privacy Policy | Amazon Exams | Cisco Exams | CompTIA Exams | Databricks Exams | Fortinet Exams | Google Exams | Microsoft Exams | VMware Exams