Free CRF-002 Mock Exam – Practice Online Confidently

A technology company utilizes advanced encryption methods to secure data in transit and at rest to ensure that sensitive customer information is protected from unauthorized access and breaches. Which of the following subcategories in the NIST Cybersecurity Framework best supports this scenario for effectively managing the organization's security?

Which of the following information security publications provides guidelines for secure web application development and is aligned with outcomes listed in the NIST Cybersecurity Framework?

An e-commerce company is upgrading its cybersecurity measures to include automated tools that detect and respond to unusual network traffic, which could indicate a cyber attack. They aim to quickly contain any identified threats to prevent data breaches. Which subcategory in the NIST Cybersecurity Framework could best support the implementation of these automated detection and response systems?

A company's IT department has identified an increase in phishing attacks targeting employees. To address this cybersecurity risk, what strategic action should be included in their comprehensive cybersecurity strategy?

An aeronautical engineering firm works primarily with the Department of Defense and relies heavily upon semiconductors that are manufactured outside the United States. They are concerned about the risk or attack surface associated with foreign made semiconductors. Which of the following subcategories in the NIST Cybersecurity Framework covers the firm’s concern?