Unit 2 assessment — Security levels and protection profiles
Six questions on target levels, the seven requirements, and what breaches a profile.
6 questions drawn from a bank of 11, in their own order with the options moved. Take it again and you sit a different paper.
0 of 6 answered
1. A plant publishes a target of SL3 for its control zone and an achieved level of SL2. What is that gap?
Tests: Target versus achieved
2. A safety instrumented system's protection profile omits confidentiality entirely. Is the profile defective?
Tests: Tailoring a profile to a function
3. What makes a must-hold statement useful on shift?
Tests: Writing must-hold statements
4. Achieved level is measured today and target level is set by consequence. Which one moves when a new firewall is installed?
Tests: Which level a control changes
5. Why is a claimed security level worth less without a documented threat the zone was sized against?
Tests: What makes a level claim meaningful
6. Why is a safety instrumented system not assessed on data confidentiality?
Tests: Choosing the requirements a zone is argued on