GRID ICS Security Standards and Compliance

Question 1

What bulk infrastructure does the NERC CIP standard set primarily protect?

Accepted Answer

The Bulk Electric System (BES)

Answer

Nuclear power generation facilities

Answer

Oil and gas pipeline networks

Answer

Municipal water treatment plants

Question 2

Which NERC CIP standard specifically governs Electronic Security Perimeters (ESPs) and remote access management?

Accepted Answer

CIP-005-7

Answer

CIP-002-5

Answer

CIP-007-6

Answer

CIP-010-4

Question 3

IEC 62443 defines security using the concept of 'Zones and Conduits.' What is the primary purpose of a Conduit in this model?

Accepted Answer

A logical or physical communication channel connecting two or more security zones

Answer

A physical pipe carrying control signals between PLCs

Answer

A dedicated hardware appliance that enforces zone policies

Answer

An encrypted VPN tunnel for remote operator access

Question 4

NIST Special Publication 800-82 was written to provide guidance for which type of system?

Accepted Answer

Industrial Control Systems (ICS) including SCADA and DCS

Answer

Healthcare IT and electronic medical records

Answer

Cloud computing and virtualized environments

Answer

Mobile device management in federal agencies

Question 5

In the IEC 62443 security level framework, what does Security Level 2 (SL 2) describe?

Accepted Answer

Protection against intentional violation using simple means and low motivation

Answer

Protection against unintentional or coincidental errors only

Answer

Protection against sophisticated attacks by well-resourced state actors

Answer

Protection requiring no active security controls beyond physical locks

Question 6

Which NERC CIP standard introduced Supply Chain Risk Management requirements for BES Cyber Systems?

Accepted Answer

CIP-013-2

Answer

CIP-002-5

Answer

CIP-007-6

Answer

CIP-011-3

Question 7

The 'Zone and Conduit' security model used in IEC 62443 was originally derived from which industrial security framework?

Accepted Answer

ISA/IEC 62443 (formerly ISA-99)

Answer

NERC CIP-005

Answer

NIST SP 800-53

Answer

ISO/IEC 27001