stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Session 7 - System & Product Design in Industrial Security Flashcards | StudBud
Explore
/
Session 7 - System & Product Design in Industrial Security
Session 7 - System & Product Design in Industrial Security
18 terms
·
StudBud Administration
·
33 plays
Imported from external platform
Flashcards
18 cards
F
Practice quiz
P
Host live
L
Questions
18
Answers
1
Which of the following is a component type in IEC 62443-4-2?
Hardware Controller
Hypervisor
Embedded Device
Data Lake
2
Which practice addresses secure design principles and interface exposure?
SVV - Security Verification & Validation Testing
SD - Secure by Design
SI - Secure Implementation
SM - Security Management
3
What does 'Defense in Depth' aim to achieve?
Reduced patching effort
Centralized access control
A single point of security
Multiple layers of security mechanisms
4
Which type of security testing is used to test mitigation effectiveness?
Threat Mitigation Testing
Performance Testing
Unit Testing
Load Testing
5
What is a compensating countermeasure?
Alternative measure to meet security requirements
Non-standard hardware
Extra firewall configuration
Layered patching
6
Which SDL practice handles managing received vulnerability notifications?
SM - Security Management
SG - Security Guidelines
SI - Secure Implementation
DM - Management of Security-Related Issues
7
Which IEC 62443 standard addresses the secure product development lifecycle?
IEC 62443-4-1
IEC 62443-1-1
IEC 62443-4-2
IEC 62443-3-3
8
What principle ensures users are given only the access needed to perform their job?
Least Privilege
Role Rotation
Separation of Duties
Zero Trust
9
Which standard defines Secure Development Lifecycle requirements for vendors?
IEC 61511
EN 50128
IEC 62443-4-1
ISO 27001
10
Which SDL practice focuses on vulnerability and penetration testing?
SI - Secure Implementation
SD - Secure by Design
SG - Security Guidelines
SVV - Security Verification & Validation Testing
11
Which component must continue to function during denial-of-service events?
Backup System
Essential Function
User interface
Logging Service
12
What is the main goal of secure system and product design in industrial cybersecurity?
Reduce cost of production
Maintain high availability while protecting systems
Optimize software interfaces
Remove nonessential components
13
Which of the following is NOT one of the eight SDL practices in IEC 62443-4-1?
Security Update Management
Security Awareness Campaign
Security Verification & Validation Testing
Secure Implementation
14
Which SDL practice ensures that updates are documented and tested?
SG - Security Guidelines
SD - Secure by Design
SUM - Security Update Management
SR - Security Requirements
15
What is the goal of 'Secure by Design' practice?
Achieve rapid deployment
Integrate security early in product design
Reduce interface count
Document vulnerabilities
16
What does the 'RA' foundational requirement stand for?
Risk Assessment
Remote Access
Resource Availability
Robust Access
17
Which foundational requirement corresponds to user authentication?
IAC - Identification and Authentication Control
RA - Resource Availability
DC - Data Confidentiality
UC - Use Control
18
What is the primary focus of IEC 62443-4-2?
Network auditing
Vendor evaluation
Security requirements for components
Lifecycle policies
