IEC 62443 frames network design around two core constructs. Which pairing correctly defines them?
- A.A zone is a physical cabinet; a conduit is a patch cable run
- B.A zone is the corporate firewall; a conduit is the antivirus policy and IEC 62443 numbers both of these from the enterprise inward
- C.A zone is a grouping of assets sharing common security requirements; a conduit is the communication path connecting zones
- D.A zone is a single device; a conduit is a VLAN identifier, a property formally verified for every commercial implementation and re-attested with each firmware release
Why C is correct
In IEC 62443 a zone groups assets that share security requirements and a target security level, while a conduit is the logical or physical communication channel linking zones. Controls are applied at conduits to govern traffic crossing zone boundaries.
Know someone studying for OT Security Fundamentals? Send them this one.