ISA-IEC-62443 無料問題集「ISA/IEC 62443 Cybersecurity Fundamentals Specialist」

（A）Role-based access control and VPNs

（B）Role-based access control and unusual data transfer patterns

（C）IDS sensors deployed within multiple zones in the production environment

（D）Firewalls and unexpected protocols being used

（A）Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-
3: Security program ratings; and Part 1-4: IACS security lifecycle and use cases

（B）Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-
3: Security technologies for IACS; and Part 1-4: IACS security lifecycle and use cases

（C）Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-
3: System security conformance metrics; and Part 1-4: Security program requirements for IACS service providers

（D）Part 1-1: Terminology, concepts, and models; Part 1-2: Master glossary of terms and definitions; Part 1-
3: System security conformance metrics; and Part 1-4: IACS security lifecycle and use cases

（A）Network segmentation

（B）Zones and conduits

（C）IACS protocol converters

（D）Application whitelistinq (AWL) OD.

（A）Control System Management System

（B）Cyber Security Monitoring System

（C）Control System Monitoring System

（D）Cyber Security Management System

（A）RS235

（B）RS435

（C）RS432

（D）RS232

（A）PCI DSS

（B）ISO 9001

（C）ISA/IEC 62443

（D）COBIT 5

（A）Control access to selected devices.

（B）Control use of selected devices.

（C）Respond to security violations.

（D）Ensure data confidentiality.

（A）Even the most modern and sophisticated safety systems can be defeated by an attacker.

（B）Safety systems are an independent protection layer and as such have no cybersecurity vulnerabilities.

（C）No dedicated malware has been found targeting safety systems specifically.

（D）By integrating control and safety systems via Modbus TCP, cybersecurity risks are at a tolerable level.

（A）Create a security management organization.

（B）Define an information security policy.

（C）Implement strict security controls.

（D）Perform a security risk assessment.

（A）To implement countermeasures

（B）To conduct periodic audits

（C）To assign a Target Security Level (SL-T)

（D）To ensure the Achieved Security Level (SL-A) meets the Target Security Level (SL-T)