ISA-IEC-62443 無料問題集「ISA/IEC 62443 Cybersecurity Fundamentals Specialist」

（A）Block all traffic by default.

（B）Allow IACS devices to access the Internet.

（C）Allow all traffic by default.

（D）Allow traffic directly from the IACS network to the enterprise network.

（A）Provides the rules for framing, converting electrical signals to data

（B）Handles the physics of getting a message from one device to another

（C）Gives transparent transfer of data between end users

（D）Forwards packets, including routing through intermediate routers

（A）Includes user applications specific to network applications such as email, file transfer, and reading data registers in a PLC

（B）Includes protocols specific to network applications such as email, file transfer, and reading data registers in a PLC

（C）Delivers and formats information, possibly with encryption and security

（D）Provides the mechanism for opening, closing, and managing a session between end-user application processes

（A）As a standalone system unrelated to other processes

（B）Only focusing on technical controls without process integration

（C）By embedding it into organizational processes and the ISMS

（D）Outsourcing all security responsibilities to third parties

（A）MODBUS/Plus

（B）MODBUS/Ethernet

（C）MODBUS/TCP

（D）MODBUS/CIP

（A）Embedded devices and software applications

（B）Only network devices

（C）Only devices

（D）Only software applications

（A）The IT security priority is availability.

（B）Routers are not used in IACS networks.

（C）The IACS security priority is integrity.

（D）IACS cybersecurity must address safety issues.

（A）Establish policy, organization, and awareness.

（B）Initiate the CSMS program.

（C）Conduct an initial/high-level risk assessment.

（D）Create reference architecture.

（A）If a high priority, apply the patch at the first unscheduled outage.

（B）If a low priority, there is no need to apply the patch.

（C）If a medium priority, schedule the installation within three months after receipt.

（D）If no problems are experienced with the current IACS, it is not necessary to apply the patch.

（A）Level 2: Quality Control

（B）Level 3: Operations Management

（C）Level 1: Supervisory Control

（D）Level 4: Process

（A）By ignoring downtime and costs

（B）Only after a cyberattack has occurred

（C）As part of the broader risk management strategy

（D）As a purely technical task with no business implications