IEC 62443-IC33 RISK ASSESSMENT SPECIALIST QUESTIONS AND ANSWERS. RATED A+.

IEC 62443-IC33 RISK ASSESSMENT SPECIALIST QUESTIONS AND ANSWERS. RATED A+. What type of vulnerability assessment technique involves using exploit tools? - -Penetration Testing (Most Invasive) Which vulnerability assessment provides feedback on performance in comparison to industry peers? - -Gap Assessment (High Level - Least invasive) Which type of assessment may include reviewing document, system walk-thru, traffic analysis, or ARP tables? - -Passive Assessment Vulnerability Assessment - -Defines, Identifies, Classifies the security vulnerabilities Penetration Testing - -Exploits vulnerabilities Which type of assessment uses tools to discover devices and vulnerabilities of the IACS? - -Active Assessment What type of vulnerability assessment identifies the worst-case unmitigated risk that the SuC presents to the organization? - -Cyber Risk Assessment Which gap assessment tool was created by the US DHS? - -CSET What type of tool is used to capture and display Ethernet communications? - -Packet Capture A feature that sends a copy of a network from one or more switch ports to a special monitoring port is called: - -Port Mirroring Which computer programs assess computers, computer systems, networks or applications for weaknesses against databases of know vulnerabilities? - -Network Vulnerability Scanning Tools Nessuss, Nexpose, and Retina are assessment tools used to discover: - -System Vulnerabilities What is the entity that can manifest a threat? - -Threat source What is the term for the likelihood of the threat scenario occurring and leading to the final consequence taking into account all protection measures and cybersecurity countermeasures in place? - - Mitigated Threat Likelihood (MTL) Delaying or blocking the flow of information in a system is an example of the following threat vector: - -Denial of Service Which threat vector involves the unauthorized redirection of data? - -Information Disclosure What is the likelihood of the threat occurring and leading to the final consequence without any cybersecurity countermeasures in place? - -Unmitigated Threat Likelihood (UTL) CIA - -Confidentiality, Integrity, Availabili