ICS Security Network Architecture and Protocols 3

Question 1

Which IEC standard specifically addresses security for industrial communication networks and system components in ICS?

Accepted Answer

IEC 62443

Answer

IEC 62443 is the international series of standards for industrial automation and control system cybersecurity.

Question 2

What is the function of a data diode in an ICS security architecture?

Accepted Answer

One-way hardware-enforced data flow from OT to IT

Answer

A data diode enforces hardware-level unidirectional data flow, typically from OT to IT, preventing any return path for attacks.

Question 3

In ICS environments, what does the term 'conduit' refer to in the context of IEC 62443?

Accepted Answer

A communication pathway between two security zones

Answer

In IEC 62443, a conduit is a logical grouping of communication channels connecting two or more security zones.

Question 4

Which network architecture approach places an application-layer proxy between the OT network and external systems to inspect ICS protocol traffic?

Accepted Answer

Application-aware firewall or protocol-aware proxy

Answer

An application-aware firewall or protocol proxy inspects ICS-specific protocol commands (e.g., Modbus function codes) for anomalies.

Question 5

What is the primary security risk of using a flat network architecture in an ICS environment?

Accepted Answer

Lateral movement allows attackers to reach all devices once inside

Answer

A flat network with no segmentation allows an attacker who compromises one device to freely move laterally to all other devices.

(ICS) Industrial Control Systems Security Certification Practice Test