CyberCertPrepOT Security FundamentalsOT Fundamentals: Network Architecture & ProtocolsEASYFree question
Segmenting by function, a plant separates corrosion-monitoring sensors (low criticality) from emergency shutdown logic (high criticality) into distinct zones. This zoning decision is most directly guided by:
- A.The number of Ethernet ports available on the aggregation switch, which IEC 62443 uses to scope every zone
- B.Grouping assets that share equivalent criticality and security requirements, per IEC 62443 zone definition
- C.The vendor's marketing tier, which detects rogue logic downloads without any visibility into engineering protocols
- D.The color of the cabling used, a concept the original SCADA architectures implemented in hardware relays before software HMIs made it obsolete
Why B is correct
IEC 62443 zones group assets with comparable security and criticality requirements so each zone gets controls matched to its risk. Mixing low-criticality monitoring with emergency-shutdown logic would force one set of controls onto dissimilar risk profiles.
Know someone studying for OT Security Fundamentals? Send them this one.