CyberCertPrepOT Security FundamentalsOT Fundamentals: Security Standards OverviewEASYFree question
Scenario
IEC 62443-3-2 introduces a method for partitioning a system into protected groupings connected by controlled communication paths.
What are these two constructs called?
- A.Cells and tunnels
- B.Segments and gateways
- C.Zones and conduits
- D.Domains and trusts
Why C is correct
IEC 62443-3-2 defines zones (groupings of assets with shared security requirements) and conduits (the communication channels connecting zones). Risk assessment is performed per zone and conduit to assign target security levels, forming the backbone of the standard's segmentation approach.
Know someone studying for OT Security Fundamentals? Send them this one.