ISA/IEC 62443 Cybersecurity
Fundamentals Specialist (Module 1) with
Correct Solutions
The primary focus of this course - ANSWER-structure and content of the ISA/IEC 62443
standards
ISA/IEC 62443 provides - ANSWER-Industrial security framework
RaaS - ANSWER-Ransomware as a Service
what is stuxnet - ANSWER-Stuxnet is a malware that was discovered in 2010 and is
believed to have been part of a covert espionage or sabotage campaign aimed at Iran's
nuclear program
what is Shamoon? - ANSWER-destructive malware designed to wipe infected systems
by overwriting information
with garbage data.
Problems with firewall - ANSWER-bad configurations and vulnerabilities which can
exploited
ETL - ANSWER-ENISAs threat landscape
One of the key differentiators
is that IACS Cybersecurity has to address issues of? - ANSWER-health, safety and
environment (HSE).
confidentiality is of lesser importance in the IACS environment because? - ANSWER-
the data is raw in form and must be analyzed within context to have any value
Defense in depth layers - ANSWER-Physical security, policies and procedures, zones
and conduits, Malware prevention, Access controls, Monitoring & Detection, Patching
RISK response - ANSWER-Design the risk out, Reduce the risk, Accept the risk,
Transfer or SHARE the risk, Redesign ineffective controls
In IT, response has to be? - ANSWER-reliable, have to have high throughput
in OT (Control side) response? - ANSWER-time critical, with modest throughput
Fundamentals Specialist (Module 1) with
Correct Solutions
The primary focus of this course - ANSWER-structure and content of the ISA/IEC 62443
standards
ISA/IEC 62443 provides - ANSWER-Industrial security framework
RaaS - ANSWER-Ransomware as a Service
what is stuxnet - ANSWER-Stuxnet is a malware that was discovered in 2010 and is
believed to have been part of a covert espionage or sabotage campaign aimed at Iran's
nuclear program
what is Shamoon? - ANSWER-destructive malware designed to wipe infected systems
by overwriting information
with garbage data.
Problems with firewall - ANSWER-bad configurations and vulnerabilities which can
exploited
ETL - ANSWER-ENISAs threat landscape
One of the key differentiators
is that IACS Cybersecurity has to address issues of? - ANSWER-health, safety and
environment (HSE).
confidentiality is of lesser importance in the IACS environment because? - ANSWER-
the data is raw in form and must be analyzed within context to have any value
Defense in depth layers - ANSWER-Physical security, policies and procedures, zones
and conduits, Malware prevention, Access controls, Monitoring & Detection, Patching
RISK response - ANSWER-Design the risk out, Reduce the risk, Accept the risk,
Transfer or SHARE the risk, Redesign ineffective controls
In IT, response has to be? - ANSWER-reliable, have to have high throughput
in OT (Control side) response? - ANSWER-time critical, with modest throughput
