Question 1

How should risk be simplified in operational environments as per the module?

Options :

A : Risk = Likelihood x Consequence

B : Risk = Threat / Vulnerability

C : Risk = Consequence / Threat

D : Risk = Threat x Vulnerability

Answer: A

Question 2

What is the simplified risk equation as described in the notes?

Options :

A : Risk = Threat + Vulnerability

B : Risk = Threat x Vulnerability x Consequence

C : Risk = Likelihood x Consequence

D : Risk = Threat x Vulnerability

Answer: C

Question 3

Which of the following is an element of monitoring and improving a CSMS?

Options :

A : Significant changes in identified risk round in periodic reassessments

B : Increase in staff training and security awareness

C : Review of system logs and other key data files

D : Restricted access to the industrial control system to an as-needed basis

Answer: C

Question 4

Which document is essential for guiding the cybersecurity enhancement efforts after a risk assessment identifies new threats?

Options :

A : Annual Party Planning Guide

B : Corporate Investment Portfolio

C : Cybersecurity Requirements Specification (CRS)

D : Employee Training Manual

Answer: C

Question 5

What does the ZCR 5.3 requirement focus on?

Options :

A : Determining the security level target (SL-T)

B : Identifying system vulnerabilities

C : Re-evaluating the likelihood and impact with existing countermeasures

D : Determining consequence and impact of a threat

Answer: D