ISA/IEC 62443 Cybersecurity Fundamentals Specialist (IC32) Practice Test

These questions are part of the practice quiz. Start practicing

• Which component is commonly required for identity verification?
• What is the size of an IPv6 address?
• What is the primary role of a router in a network?
• Which of the following is part of the OPC specifications?
• What function does OSI Layer 1 serve?
• What is the first step in the ICS Threat-Based Risk Assessment Model?
• Which of the following is NOT considered a boundary protection device?
• Which of the following is not a feature of the OSI Layer 3?
• Which of the following is a component of the Functional Security Assessment in the ISASecure process?
• What does the acronym NX represent in cybersecurity?
• Which of the following is part of a Functional Security Assessment?
• Which of the following SLs provides no specific security requirements?
• What is one method for ensuring timely response to events in cybersecurity?
• Which firewall type monitors the state of active connections and determines which packets to allow based on the state?
• What is a critical aspect of a security zone?
• What is not a part of the incident response program?
• Which cipher is an example of asymmetric key cryptography?
• Which of the following is NOT a protocol of the session layer?
• What elements does a risk analysis identify?
• Which mnemonic helps remember the main threats to a system?
• Which of the following is a protocol used for the reservation of network resources?
• Which measure is NOT recognized as a risk response?
• What does ARP stand for in networking terms?
• What is a limitation of firewalls?
• What method is used to detect missing devices in a security framework?
• Which type of loss involves replacing an asset?
• Which routing protocol is abbreviated as OSPF?
• In an IPv4 address, what does the first segment typically indicate?
• What can a security zone be categorized as?
• What is the main purpose of the Cyber Security Management System (CSMS)?
• Which industrial protocol is associated with Ethernet in the context of the Common Industrial Protocol?
• Which of the following can help control unauthorized data access on removable media?
• How many bits are used in an IPv4 address?
• What is one common form of threat?
• In cybersecurity, what is the significance of a firecall?
• Which of the following represents a loss of essential function?
• What is included in the FR-7 - Resource Availability category?
• What kind of inspection does a stateful firewall perform?
• Which protocol is commonly used for secure remote shell access?
• Which OSI layer is known for handling the raw transmission of bits over a physical medium?
• What is a characteristic of both Profibus DP and PA?
• What is a common characteristic of mobile code?
• What is a defining feature of internal threats?
• Which term refers to the management of essential functions to ensure system reliability?
• Which of the following best describes a 'risk response' measure?
• Which of the following is a characteristic of the No Execute (NX) bit?
• Which year was the Modbus protocol developed?
• What does MSUS refer to in cybersecurity terms?
• Which is a key element in the system development and maintenance process?
• What does SuC refer to in cybersecurity terminology?
• Which element is NOT part of the CSMS?
• What is the purpose of deep packet inspection in OPC-aware firewalls?
• Which of the following best represents the relationship between channels and conduits?
• What is the first step in the basic risk assessment process?
• Which of the following is considered a Target Security Level (SL)?
• What does LLC stand for in OSI Layer 2 context?
• What is included in the ISASecure Supplier Device Approval Process?
• How does an external deliberate threat differ from an internal threat?
• Which VPN security protocol is designed for tunneling over HTTPS?
• Which protocol provides authentication header functionalities in IPSec?
• What does the element of ‘Monitoring and Improving the CSMS’ focus on?
• Which of the following is a characteristic of internal threats?
• What are the two main categories of threat sources?
• What does HSE stand for in a cybersecurity context?
• Which protocol is associated with implicit messaging in Ethernet/IP?
• Which of the following is a method for protecting data from unauthorized access?
• Which of the following is NOT a function of the Presentation Layer?
• What is essential beyond perimeter defense in cybersecurity?
• What is defined as a function or capability required to maintain safety and availability for equipment?
• What is the primary function of the Internet Assigned Numbers Authority?
• Which type of attack is characterized by unauthorized access from within an organization?
• What undermines the use of traditional firewalls with OPC Classic?
• What device is primarily associated with using MAC addresses for decision-making?
• Which communication protocol variant specifically addresses safety in process environments?
• Which of the following devices is not typically considered a part of network security technologies?
• What does EAL stand for in Common Criteria?
• What is the focus of the System Robustness Testing component in security assurance?
• What device operates at the physical layer of the OSI model?
• What foundational requirement addresses the use of cryptography for information confidentiality?
• Which aspect is NOT part of the CSMS scope?
• What is the primary purpose of network segmentation?
• What foundational requirement involves account management and authenticator feedback?
• Which security level would typically involve high motivation and extensive resources for intentional violations?
• In the context of the OSI model, which layer is responsible for establishing, maintaining, and terminating communication sessions?
• Which layer of the OSI model requires routers and is responsible for packet forwarding?
• Which component can help in managing communications between secure zones?
• Which protocol is known as the Routing Information Protocol?
• What is one of the security levels in firewall architecture?
• What does Security Level 2 (SL-2) protect against?
• In firewall architecture, what does a Router with ACLs do?
• Which of the following is NOT a phase in the Software Development Lifecycle?
• Which protocol is primarily associated with Layer 2 network segmentation?
• Which of the following protocols is not part of OSI Layer 4?
• Which layer of the OSI model is considered the Application Layer?
• Which term describes the network segmentation achieved through architectures in network security?
• What is a common issue with intrusion detection systems (IDS)?
• What does the 'S' in STRIDE stand for?
• Which of the following best describes the nature of OSI Layer 2?
• What is the architecture used by Modbus?
• What is the primary role of an Intrusion Prevention System (IPS)?
• Which environmental condition can negatively impact IACS integrity?
• Which of the following is a standard method for ensuring that systems remain updated?
• Which of the following is considered the most common VPN security protocol?
• What type of compensating countermeasure focuses on the physical aspect of a component?
• What does IACS stand for?
• What does WSUS stand for in the context of cybersecurity?
• What methodology is best suited for measuring numeric values and quantifying risks?
• Which type of risk assessment methodology is based on previous incidents?
• Which phrase best describes the evolution aspect of a security policy?
• Which of the following is considered an active type of attack?
• Which layer provides session management for application processes?
• What layer does a router primarily function at?
• What is a potential risk associated with JavaScript?
• Port 445 is primarily associated with which service?
• Which class of cryptography involves algorithms like AES and DES?
• In risk assessment, how is risk quantified?
• Which protocol would typically be involved in the transmission of multimedia data over networks?
• What is the focus of Classification of Incidents in an incident response program?
• Which foundational requirement involves malicious code protection and input validation?
• Which of the following does OSI Layer 2 NOT provide?
• What is included under FR-4 - Data Confidentiality?
• What is the purpose of Detection in Depth?
• What tool is commonly used for network mapping and security auditing?
• What distinguishes Modbus as an open standard?
• What approach involves using black and white lists in cybersecurity?
• Which of the following is not classified as a routable protocol in OSI Layer 3?
• Which of the following is a characteristic of a Host-Based IDS?
• Which component is prioritized when assessing business consequences in cybersecurity?
• In an IPv4 address, what does the "loopback" address typically refer to?
• What is a primary feature of a Risk Analysis within a CSMS?
• What should be included in a Business Continuity Program?
• Which components are part of an industrial automation and control system?
• What does SDLC stand for in networking?
• Which class of firewall only allows or blocks data packets based on predefined rules?
• What is a countermeasure in a cybersecurity context?
• Which layer of the DOD Model corresponds to the transport layer of the OSI model?
• What is a policy in the context of cybersecurity?
• What is something that firewalls can manage?
• Which of the following is a common attack vector?
• What technology underlies the OPC protocol?
• What is the purpose of the Address Resolution Protocol (ARP)?
• What defines a channel in the context of a communications conduit?
• What is VLAN Hopping associated with?
• Which mode of IPSec encrypts both the payload and the header?
• Which aspect is considered while analyzing threats in the ICS Threat-Based Risk Assessment Model?
• What secure protocol is the encryption method associated with HTTPS?
• Which of the following is not a variant of Profibus?
• What does OPC stand for in the context of process control?
• What factors can contribute to an indirect loss?
• In a security policy, what aspect addresses who is responsible for security measures?
• What type of protocol is High-Level Data Link Control (HDLC)?
• Which type of attack capitalizes on data being transmitted without altering it?
• What should be protected to ensure cybersecurity for external connections?
• What does the firecall method provide in a secure control system?
• What foundational requirement focuses on concurrent session control and audit storage capacity?
• What does IGMP stand for?
• What does VLAN stand for?
• Which of the following is a representative standard for OSI Layer 1?
• Which of the following is critical for maintaining cybersecurity during system changes?
• What does the 802.1Q protocol relate to?
• Which of the following is NOT one of the threats identified by the DAMIT mnemonic?
• What is the characteristic weakness associated with bridges in networking?
• What practice involves reviewing and updating security procedures?
• In which layer does a bridge operate?
• Which activity is part of the Software Development Lifecycle Assessment?
• Which protocol is associated with the Application Layer for email communication?
• Which foundational requirement includes strength of public key authentication?
• What is the TCP port number used by Modbus?
• Which IP address range is considered private for IPv4?
• What type of threat agent can be categorized as a natural disaster?
• What is the data transfer port used by File Transfer Protocol (FTP) for control?
• At which layer do basic switches operate?
• What layer of the OSI model is responsible for data formatting and delivery to the application layer?
• Which of the following provides the most sophisticated navigation capabilities globally?
• What does the term "conduit" refer to in cybersecurity?
• Which layer does the Data Link Protocol operate in the OSI model?
• What defines a zone in cybersecurity within an asset grouping?
• Which of the following is a type of IDS?
• Which of the following represents a type of system zone in cybersecurity?
• Which firewall vendor is associated with the mGuard product line?
• What defines Software Security Assurance (SSA)?
• Which technique is NOT part of malicious code protection?
• Which method is associated with compensating countermeasures?
• What is the primary function of gateways in networking?
• Which threat is characterized by the disruption of service to users?
• The Common Industrial Protocol (CIP) is associated with which of the following companies?
• Which of the following is a form of secure protocol for FTP?
• Which of the following is NOT a wireless access technology?
• Which foundational requirement includes timed event responses and access via untrusted networks?
• What is a primary function of a Network IDS?
• What does a firewall policy ACL rule typically include?
• What is the primary function of a firewall in network security?