1 ISA 62443 IC34 EXAM REVIEW QUESTIONS AND ANSWERS,
GRADED A+
What is phase 1 of the IACS Cybersecurity Life Cycle? - ✅✅-Assess
What is phase 2 of the IACS Cybersecurity Life Cycle? - ✅✅-Develop & Implement
What is phase 3 of the IACS Cybersecurity Life Cycle? - ✅✅-Maintain
When are countermeasures are implemented to meet the Target Security Level (SL-T)? - ✅✅-During
the Develop & Implement phase of ICS security implementation
What is the primary goal of the Maintain phase in ICS security implementation? - ✅✅-To ensure the
Achieved Security Level (SL-A) is equal to or better than the Target Security Level (SL-T).*
What is step 1 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-High-Level Cyber Risk
Assessment
What is step 2 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-Allocation of IACS Assets to
Security Zones or Conduits
What is step 3 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-Detail Cyber Risk Assessment
What is step 4 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Cybersecurity
Requirements Specification
What is step 5 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Design and
engineering of Cybersecurity countermeasures
, What is step 6 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Installation,
commissioning and validation of Cybersecurity countermeasures
What is step 7 of the IACS Cybersecurity Life Cycle (Maintain)? - ✅✅-Cybersecurity Maintenance,
Monitoring and Management of Change
What is step 8 of the IACS Cybersecurity Life Cycle (Maintain)? - ✅✅-Cyber Incident Response &
Recovery
What are the continuous processes activities of the IACS Cybersecurity Life Cycle? - ✅✅-Cybersecurity
Management System: Policies, Procedures, Training & Awareness, Periodic Cybersecurity Audits
A risk assessment should provide information about what? - ✅✅-An entire system as well as each zone
What information should be provided from a risk assessment? - ✅✅--Risk profile
-Highest severity consequences
-Threats / vulnerabilities leading to the highest risks
-Target Security Levels
-Recommendations
What is the named output of a risk assessment? - ✅✅-Cybersecurity Requirement Specifications (CRS)
Once created, what is the Cybersecurity Requirement Specifications (CRS) used for? - ✅✅-Input for the
Develop & Implementation phase
What, at a minimum, should Cybersecurity Requirement Specifications (CRS) include? - ✅✅--SUC
description
-Zone and conduit drawings
-Zone and conduit characteristics
-Operating environment assumptions
GRADED A+
What is phase 1 of the IACS Cybersecurity Life Cycle? - ✅✅-Assess
What is phase 2 of the IACS Cybersecurity Life Cycle? - ✅✅-Develop & Implement
What is phase 3 of the IACS Cybersecurity Life Cycle? - ✅✅-Maintain
When are countermeasures are implemented to meet the Target Security Level (SL-T)? - ✅✅-During
the Develop & Implement phase of ICS security implementation
What is the primary goal of the Maintain phase in ICS security implementation? - ✅✅-To ensure the
Achieved Security Level (SL-A) is equal to or better than the Target Security Level (SL-T).*
What is step 1 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-High-Level Cyber Risk
Assessment
What is step 2 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-Allocation of IACS Assets to
Security Zones or Conduits
What is step 3 of the IACS Cybersecurity Life Cycle (Assess Phase)? - ✅✅-Detail Cyber Risk Assessment
What is step 4 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Cybersecurity
Requirements Specification
What is step 5 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Design and
engineering of Cybersecurity countermeasures
, What is step 6 of the IACS Cybersecurity Life Cycle (Develop & Implement Phase)? - ✅✅-Installation,
commissioning and validation of Cybersecurity countermeasures
What is step 7 of the IACS Cybersecurity Life Cycle (Maintain)? - ✅✅-Cybersecurity Maintenance,
Monitoring and Management of Change
What is step 8 of the IACS Cybersecurity Life Cycle (Maintain)? - ✅✅-Cyber Incident Response &
Recovery
What are the continuous processes activities of the IACS Cybersecurity Life Cycle? - ✅✅-Cybersecurity
Management System: Policies, Procedures, Training & Awareness, Periodic Cybersecurity Audits
A risk assessment should provide information about what? - ✅✅-An entire system as well as each zone
What information should be provided from a risk assessment? - ✅✅--Risk profile
-Highest severity consequences
-Threats / vulnerabilities leading to the highest risks
-Target Security Levels
-Recommendations
What is the named output of a risk assessment? - ✅✅-Cybersecurity Requirement Specifications (CRS)
Once created, what is the Cybersecurity Requirement Specifications (CRS) used for? - ✅✅-Input for the
Develop & Implementation phase
What, at a minimum, should Cybersecurity Requirement Specifications (CRS) include? - ✅✅--SUC
description
-Zone and conduit drawings
-Zone and conduit characteristics
-Operating environment assumptions
