What is the primary purpose of ISO/IEC 27001?

To define specific technical controls for securing industrial control systems, such as firewalls and intrusion detection systems.

To provide a step-by-step guide for implementing specific security technologies in an organization.

To provide a framework for establishing, implementing, maintaining, and continually improving an information security management system (ISMS).

To certify individual security products and software for compliance with international security standards.

A system integrator is designing a security solution for a water treatment plant. The plant manager wants to achieve a specific security level as defined by ISA/IEC 62443. What is the first step the integrator should take to determine the required security level?

Ask the plant manager to specify the security level without analysis.

Implement all controls from ISO 27002 to meet the security level.

Conduct a risk assessment to determine the target security level for each zone.

Select the highest security level for all zones to ensure maximum protection.

Which step in an ISO-based roadmap for ICS security policy focuses on ongoing improvement?

Continuous monitoring and review

A mid-sized manufacturer is starting to implement an ISO-based ICS security policy. They have limited budget and need to show quick wins. Which step should they prioritize in the roadmap?

Developing a full business continuity plan.

Purchasing a new SIEM platform.

Conducting a full risk assessment of every ICS device.

Implementing network segmentation between IT and OT networks.

What is the primary focus of the ISA/IEC 62443 series of standards?

Security of industrial automation and control systems (IACS)

General information security management for all organizations

Physical security of industrial facilities

Data privacy and protection regulations

EC-CouncilICS/SCADA Cybersecurity

Domain 6Objective 2

Establishing Policy - ISO Roadmap ICSSCADA Practice Questions (Page 8)

Part of the Securing the ICS Network domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

7concepts

Questions 36–40

36foundation · easy
What is the primary purpose of ISO/IEC 27001?
Select an answer first
37expert · hard
A system integrator is designing a security solution for a water treatment plant. The plant manager wants to achieve a specific security level as defined by ISA/IEC 62443. What is the first step the integrator should take to determine the required security level?
Select an answer first
38foundation · easy
Which step in an ISO-based roadmap for ICS security policy focuses on ongoing improvement?
Select an answer first
39application · medium
A mid-sized manufacturer is starting to implement an ISO-based ICS security policy. They have limited budget and need to show quick wins. Which step should they prioritize in the roadmap?
Select an answer first
40foundation · easy
What is the primary focus of the ISA/IEC 62443 series of standards?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ICSSCADA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ICSSCADA” is a trademark of its owner, used for identification only.