ISA-IEC-62443問題集、ISA実際の試験問題

質問 1

Which protocol is commonly used for managing the security of message transmission on the Internet via web browsers?

A. IPsec

B. PPTP

C. L2TP

D. TLS

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which is the PRIMARY objective when defining a security zone?
Available Choices (select all choices that are correct)

A. All assets in the zone must be physically located in the same area.

B. All assets in the zone must be at the same level in the Purdue model.

C. All assets in the zone must be from the same vendor.

D. All assets in the zone must share the same security requirements.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

A national standards body wants to represent its country's interests at an international level and adopt global standards locally. What role does this organization fulfill?

A. National Standardization Body

B. Industry Consortium

C. Global Standards Development Organization (SDO)

D. Regulatory Agency

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which of the following BEST describes 'Vulnerability'?

A. An event that could breach security

B. The result that occurs from a particular incident

C. An exploitable flaw in management

D. The potential for violation of security

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Why is OPC Classic considered firewall unfriendly?

A. It works with control devices from different manufacturers.

B. It allows use of only port 80.

C. It dynamically assigns several ports.

D. It is an obsolete communication standard.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 6

What is the formula for calculating risk?

A. Risk = Threat * Vulnerability * Consequence

B. Risk = Threat + Vulnerability + Consequence

C. Risk = Threat - Vulnerability * Consequence

D. Risk = Likelihood + Consequence

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which of the following is NOT a general class of firewalls?

A. Stateful inspection

B. Network monitor

C. Packet filter

D. Application proxy

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which of the following ISA-99 (IEC 62443) Reference Model levels is named correctly?
Available Choices (select all choices that are correct)

A. Level 3: Operations Management

B. Level 2: Quality Control

C. Level 1: Supervisory Control

D. Level 4: Process

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 9

An energy utility company needs to implement cybersecurity controls specifically tailored for industrial control systems. Which standard from the list would be MOST appropriate for their use?

A. ISO/IEC 27019

B. ISO/IEC 27001

C. IEC PAS

D. NIST SP 800-53

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 10

Which of the following is a trend that has caused a significant percentage of security vulnerabilities?
Available Choices (select all choices that are correct)

A. IACS using equipment designed for measurement and control

B. IACS evolving into a number of closed proprietary systems

C. IACS becoming integrated with business and enterprise systems

D. IACS developing into a network of air-gapped systems

正解: C

解説: (PassTest メンバーにのみ表示されます)

ISA/IEC 62443 Cybersecurity Fundamentals Specialist - ISA-IEC-62443 模擬練習