IEC 62443 exam with verified detailed answers

2




IEC 62443 exam with verified detailed
|| || || || || ||




answers

Part 1-1 - Correct answer ✔Terminology, Concepts & Models
|| || || || || || || ||




Part 1-2 - Correct answer ✔Master Glossary of Definitions
|| || || || || || || ||




Part 1-3 - Correct answer ✔Security System Conformance Metrics
|| || || || || || || ||




Part 1-4 - Correct answer ✔Security Lifecycle and Use Cases
|| || || || || || || || ||




Part 2-1 - Correct answer ✔Security Program Requirements for Asset Owners
|| || || || || || || || || ||




Part 2-2 - Correct answer ✔Security Program/Protection Ratings
|| || || || || || ||




Part 2-3 - Correct answer ✔Patch Management in IACS environment
|| || || || || || || || ||




Part 2-4 - Correct answer ✔Security Program Requirements for Service Providers
|| || || || || || || || || ||




Part 2-5 - Correct answer ✔Implementation Guidance for Asset Owners
|| || || || || || || || ||




Part 3-1 - Correct answer ✔Security Technologies
|| || || || || ||




Part 3-2 - Correct answer ✔Security (RA) Risk Assessment for System Design
|| || || || || || || || || || ||

, 2




Part 3-3 - Correct answer ✔System Security Requirements and SLs
|| || || || || || || || ||




Part 4-1 - Correct answer ✔Product Security Development Lifecycle Requirements
|| || || || || || || || ||




Part 4-2 - Correct answer ✔Technical Security Requirements for Components
|| || || || || || || || ||




IACS Industrial Automation and Control System(s) - Correct answer ✔Collection of
|| || || || || || || || || || ||



personnel, hardware, software, policies involved in the operation of the industrial
|| || || || || || || || || || ||



process and that can affect/influence its safe, secure and reliable operation.
|| || || || || || || || || ||




What does a reference model do? - Correct answer ✔Provides overall conceptual basis.
|| || || || || || || || || || || ||




What does an asset model do? - Correct answer ✔Describes relationships between
|| || || || || || || || || || || ||



assets.



What does a Reference Architecture (Model) do? - Correct answer ✔Describes
|| || || || || || || || || || ||



configuration of assets || ||




What does a zone model do? - Correct answer ✔Groups reference architecture
|| || || || || || || || || || || ||



elements according to defined characteristics (zones and conduits)
|| || || || || || ||




ISA99 Model Relationships which make up a security program. - Correct answer
|| || || || || || || || || || || ||



✔Policies, Procedures, Guidelines -> Assets -> Reference Architecture -> Zone &
|| || || || || || || || || || ||



Conduit Model ||




Reference Model - Levels - Correct answer ✔Level 4 - Business Planning & Logistics
|| || || || || || || || || || || || || ||




Level 3 - Manufacturing Operations Management
|| || || || || ||

, 2


Level 2,1 - Batch/Continuous/Discrete Control
|| || || ||




Level 0 - Production Process
|| || || ||




Reference Model for ISA99 - Levels - Correct answer ✔Level 3 - Operations/System
|| || || || || || || || || || || || ||



Management ||




Level 2.5 - Supervisory Control
|| || || ||




Level 2 - Site Monitoring and Local Display
|| || || || || || ||




Level 1 - Basic Control, Safety & Protection
|| || || || || || || ||




Level 0 - Process
|| || ||




4 points on Asset Model - Correct answer ✔- Starts at a high level
|| || || || || || || || || || || || || ||




- Includes all ANSI/ISA95 levels 0-4 equipment and info systems
|| || || || || || || || ||




- Explicitly includes network and ancillary equipment
|| || || || || || ||




- Generic - fits many control system deployment situations
|| || || || || || || ||




Security Zone definition - Correct answer ✔A logical grouping of -
|| || || || || || || || || || ||



physical/informational/application assets - sharing common security requirements || || || || || ||




What is a Security Zone Border? - Correct answer ✔The boundary between INCLUDED
|| || || || || || || || || || || || ||



and EXCLUDED elements.
|| ||




How is the security policy of a zone enforced? - Correct answer ✔A combination of
|| || || || || || || || || || || || || || ||



mechanisms at the zone edge and within the zone.
|| || || || || || || ||