IEC 62443 frames network design around two core constructs. Which pairing correctly defines them?
- A.A zone is a physical cabinet; a conduit is a patch cable run
- B.A zone is a single device; a conduit is a VLAN identifier
- C.A zone is the corporate firewall; a conduit is the antivirus policy
- D.A zone is a grouping of assets sharing common security requirements; a conduit is the communication path connecting zones
Why D is correct
In IEC 62443 a zone groups assets that share security requirements and a target security level, while a conduit is the logical or physical communication channel linking zones. Controls are applied at conduits to govern traffic crossing zone boundaries.
Know someone studying for OT Security Fundamentals? Send them this one.