CyberCertPrepOT Security FundamentalsOT Fundamentals: Security Standards OverviewEASYFree question
IEC 62443-3-2 introduces a method for partitioning a system into protected groupings connected by controlled communication paths. What are these two constructs called?
- A.Domains and trusts
- B.Zones and conduits
- C.Segments and gateways
- D.Cells and tunnels
Why B is correct
IEC 62443-3-2 defines zones (groupings of assets with shared security requirements) and conduits (the communication channels connecting zones). Risk assessment is performed per zone and conduit to assign target security levels, forming the backbone of the standard's segmentation approach.
Know someone studying for OT Security Fundamentals? Send them this one.