According to ISA/IEC TR 62443-1-5, which documents can be referenced when creating a security profile?
Correct Answer: C
ISA/IEC TR 62443-1-5 provides formal guidance on the creation and structure of cybersecurity profiles within the ISA/IEC 62443 framework. A security profile is intended to tailor existing requirements to a specific industry sector, application, or use case without altering the integrity of the base standard. Step 1: Purpose of a security profile The technical report clarifies that profiles are selections and combinations of existing requirements, not a mechanism to invent new controls. Profiles ensure consistent application of ISA/IEC 62443 while addressing sector-specific risk, regulatory, or operational needs. Step 2: Authorized source documents TR 62443-1-5 explicitly states that security profiles may reference requirements from: * ISA/IEC 62443-2-1 (asset owner security program requirements) * ISA/IEC 62443-2-4 (service provider requirements) * ISA/IEC 62443-3-3 (system security requirements) * ISA/IEC 62443-4-1 (secure product development lifecycle) * ISA/IEC 62443-4-2 (technical component requirements) These documents collectively cover organizational, system, and component security. Step 3: Why other options are incorrect * Limiting profiles to only Parts 3-3 and 4-1 excludes governance and lifecycle requirements. * Parts 1-1 and 1-2 are foundational and definitional, not requirement sources. * Referencing standards outside the 62443 family violates the intent of maintaining internal consistency. Step 4: Standard integrity By restricting profiles to these documents, ISA ensures profiles remain interoperable, auditable, and certifiable. Thus, Option C is the only correct answer.
Question 57
Which layer specifies the rules for Modbus Application Protocol Available Choices (select all choices that are correct)
Correct Answer: D
The Modbus Application Protocol is a messaging protocol that provides client/server communication between devices connected on different types of buses or networks. It is positioned at level 7 of the OSI model, which is the application layer. The application layer is the highest level of the OSI model and defines the rules and formats for data exchange between applications. The Modbus Application Protocol is independent of the underlying communication layers and can be implemented using different transport protocols, such as TCP/IP, serial, or Modbus Plus. The Modbus Application Protocoldefines the function codes, data formats, and error codes for Modbus transactions123 References: * MODBUS APPLICATION PROTOCOL SPECIFICATION V1 * Modbus - Wikipedia * Overview of Modbus - EPICS support for Modbus - GitHub Pages
Question 58
Which is the PRIMARY responsibility of the network layer of the Open Systems Interconnection (OSI) model? Available Choices (select all choices that are correct)
Correct Answer: A
Question 59
What does the abbreviation CSMS round in ISA 62443-2-1 represent? Available Choices (select all choices that are correct)
Correct Answer: B
Question 60
Why is patch management more difficult for IACS than for business systems? Available Choices (select all choices that are correct)
