stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Session 4 - Industrial Cyber Security - OT Security Flashcards | StudBud
Explore
/
Session 4 - Industrial Cyber Security - OT Security
Session 4 - Industrial Cyber Security - OT Security
20 terms
·
StudBud Administration
·
52 plays
Imported from external platform
Flashcards
20 cards
F
Practice quiz
P
Host live
L
Questions
20
Answers
1
Which of the following is NOT a typical myth in OT security?
You will always know when you're attacked
Antivirus software is sufficient
Cybersecurity is only an IT issue
Cybersecurity is an organization-wide concern
2
What is the main purpose of the 'System under Consideration' (SuC)?
Identify safe zones only
Select antivirus tools
Define risk thresholds
Scope the industrial system for analysis
3
What is the top priority security objective in OT environments?
Integrity
Authentication
Confidentiality
Availability
4
What does the term 'Defense-in-Depth' refer to?
Focusing only on firewall protection
Using only one level of defense
Layered approach with multiple security measures
Security testing only after development
5
Who is responsible for the overall industrial automation asset in IEC 62443?
System integrator
Asset owner
Security tester
Vendor
6
What distinguishes IEC 62443 from ISO 27001 in OT environments?
Cloud infrastructure only
Integration of functional safety and system lifecycle
Focus on human factors
Encryption mandates
7
What is the main function of maturity levels in IEC 62443-4-1?
Define physical zones
Assess process discipline and repeatability
Measure software size
Score network speed
8
Which OT protocol includes security by design?
OPC UA
Modbus RTU
PROFINET
Fieldbus
9
Which layer includes Manufacturing Execution Systems (MES) in secure infrastructure?
Enterprise
Basic Process Control
DMZ
Supervision
10
Which IEC 62443 part focuses on product security development lifecycle?
IEC 62443-4-1
IEC 62443-2-4
IEC 62443-3-3
IEC 62443-1-1
11
What does 'hardening' refer to in OT cybersecurity?
Encrypting all data
Reducing software complexity
Eliminating unnecessary features/services
Using only custom hardware
12
Which standard supports safe shutdowns in industrial automation?
ISO 27001
ISO 9001
NIST 800-82
IEC 61508
13
What does AIC stand for in the context of OT security priorities?
Availability, Integrity, Confidentiality
Access, Information, Classification
Authorization, Isolation, Confidentiality
Authentication, Integrity, Control
14
What is the role of a conduit in IEC 62443?
Enables secure communication between zones
Controls access to operator terminals
Encrypts all data by default
Stores backup data
15
Which standard is the cornerstone of industrial cybersecurity?
GDPR
ISO 27001
NIST 800-53
IEC 62443
16
What is SL 3 in IEC 62443 security levels designed to protect against?
Casual violations
Intentional attacks using sophisticated means
Power outages
Insider threats
17
Which of the following is an organizational countermeasure in IEC 62443?
Patch management
Data encryption
Access control list
Process evaluation (maturity level)
18
What is the primary benefit of IEC 62443's zone and conduit model?
Network expansion
Cost reduction
Risk-based isolation and secure communication
Data compression
19
Which IEC 62443 component addresses IACS service providers?
IEC 62443-2-4
IEC 62443-1-3
IEC 62443-3-2
IEC 62443-4-2
20
Which term refers to grouping assets by location or function in IEC 62443?
Zones
Conduits
Firewalls
Subnets
