ISA BUNDLED EXAMS ACTUAL QUESTIONS
VERIFIED ANSWERS PREMIUM REVIEW
SHEET FULL RESOURCE
⩥ External Time Sources.
Answer: GPS
GLONASS - Global Navigation Satellite System
Galileo
⩥ FR-7 - Resource Availability includes:.
Answer: DoS Protection
Resource Management (Prevent Resource Exhaustion)
Control System Backup
Control System Recovery & Reconstitution
Emergency Power
Network and Security Config Settings
Least Functionality
Control system component inventory
⩥ Types of Security Levels (SLs).
Answer: * Target SLs (SL-T)
,* Achieved SLs (SL-A)
* Capability SLs (SL-C)
* Initial SL
⩥ Foundational Requirements (FR).
Answer: 1) Identification and Authentication Control (IAC)
2) Use Control (UC)
3) System Integrity (SI)
4) Data Confidentiality (DC)
5) Restricted Data Flow (RDF)
6) Timely Response to Events (TRE)
7) Resource Availability (RA)
⩥ Security Level Definitions.
Answer: SL-0: No specific requirements or security protection necessary
SL-1: Protection against casual or coincidental violation
SL-2: Protection against intentional violation using simple means with
low resources, generic skills and low motivation
SL-3: Protection agains intentional violation using sophisticated means
with moderate resources, IACS-specific skills and moderate motivation
SL-4: Protection agains intentional violation using sophisticated means
with extended resources, IACS-specific skills and high motivation
,⩥ FR-1 Identification and Authentication Control (IAC).
Answer: * Human user identification and authentication
* S/W processes and device identification and authentication
* Account management
* Identified management
* Authenticator management
* Wireless access management
* Password strength
* PKI certificates
* Strength of Public Key authentication
* Authenticator feedback
* Unsuccessful login attempts
* System use notification
* Access via untrusted networks
⩥ FR-2 Use Control (UC).
Answer: * Authentication enforcement
* Wireless use control
* Use control for portable and mobile devices
* Mobile code (Java, PDF, etc.)
* Session lock
* Remote session termination
, * Concurrent session control
* Auditable events
* Audit storage capacity
* Response to audit processing failures
* Timestamps
* Non-repudiation
⩥ FR-3 System Integrity (SI).
Answer: * Communication integrity
* Malicious code protection
* Security functionality verification
* S/W and information integrity
* Input validation
* Deterministic output
* Error handling
* Session integrity
* Protection of audit information
⩥ FR-4 Data Confidentiality (DC).
Answer: * Information confidentiality
* Information persistence (purge shared memory)
* Use of cryptography
VERIFIED ANSWERS PREMIUM REVIEW
SHEET FULL RESOURCE
⩥ External Time Sources.
Answer: GPS
GLONASS - Global Navigation Satellite System
Galileo
⩥ FR-7 - Resource Availability includes:.
Answer: DoS Protection
Resource Management (Prevent Resource Exhaustion)
Control System Backup
Control System Recovery & Reconstitution
Emergency Power
Network and Security Config Settings
Least Functionality
Control system component inventory
⩥ Types of Security Levels (SLs).
Answer: * Target SLs (SL-T)
,* Achieved SLs (SL-A)
* Capability SLs (SL-C)
* Initial SL
⩥ Foundational Requirements (FR).
Answer: 1) Identification and Authentication Control (IAC)
2) Use Control (UC)
3) System Integrity (SI)
4) Data Confidentiality (DC)
5) Restricted Data Flow (RDF)
6) Timely Response to Events (TRE)
7) Resource Availability (RA)
⩥ Security Level Definitions.
Answer: SL-0: No specific requirements or security protection necessary
SL-1: Protection against casual or coincidental violation
SL-2: Protection against intentional violation using simple means with
low resources, generic skills and low motivation
SL-3: Protection agains intentional violation using sophisticated means
with moderate resources, IACS-specific skills and moderate motivation
SL-4: Protection agains intentional violation using sophisticated means
with extended resources, IACS-specific skills and high motivation
,⩥ FR-1 Identification and Authentication Control (IAC).
Answer: * Human user identification and authentication
* S/W processes and device identification and authentication
* Account management
* Identified management
* Authenticator management
* Wireless access management
* Password strength
* PKI certificates
* Strength of Public Key authentication
* Authenticator feedback
* Unsuccessful login attempts
* System use notification
* Access via untrusted networks
⩥ FR-2 Use Control (UC).
Answer: * Authentication enforcement
* Wireless use control
* Use control for portable and mobile devices
* Mobile code (Java, PDF, etc.)
* Session lock
* Remote session termination
, * Concurrent session control
* Auditable events
* Audit storage capacity
* Response to audit processing failures
* Timestamps
* Non-repudiation
⩥ FR-3 System Integrity (SI).
Answer: * Communication integrity
* Malicious code protection
* Security functionality verification
* S/W and information integrity
* Input validation
* Deterministic output
* Error handling
* Session integrity
* Protection of audit information
⩥ FR-4 Data Confidentiality (DC).
Answer: * Information confidentiality
* Information persistence (purge shared memory)
* Use of cryptography
