Question 1

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

Options :

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Question 2

A financial services firm has established and documented cybersecurity policies and procedures that are consistently implemented across all branches. They conduct regular training sessions and audits to ensure that these practices are maintained and effective. What tier best describes their cybersecurity implementation?

Options :

A : Tier 1 (Partial)

B : Tier 2 (Risk Informed)

C : Tier 3 (Repeatable)

D : Tier 4 (Adaptive)

Answer: C

Question 3

A software company identifies a significant risk of source code leaks due to inadequate version control and employee access management. What key elements should be included in their risk management plan to address this issue effectively?

Options :

A : Increase general cybersecurity awareness training, especially social engineering attacks, for all employees.

B : Outsource source code development to external contractors to reduce internal risks

C : Implement robust version control systems and restrict access to sensitive information based on roles and responsibilities

D : Conduct a public relations campaign to reassure stakeholders about data security and emphasize cybersecurity training

Answer: C

Question 4

Which of the following best describes how the NIST Cybersecurity Framework facilitates organizational cybersecurity practices?

Options :

A : By utilizing rigid structures that limit its adaptability and evolution

B : By ensuring absolute cybersecurity by elimiating all risk of a data breaches

C : By dictating precise cybersecurity policies to be followed without deviation

D : By providing a common language to promote effective collaboration

Answer: D

Question 5

Which of the following best describes the purpose of the Asset Management (ID.AM) category?

Options :

A : To audit and assess the efficiency of an organization-s cybersecurity measures

B : To provide financial resources for proposed cybersecurity improvements

C : To identify and manage all assets that support organizational objectives

D : To implement technical controls and defenses for digital and physical assets

Answer: C

Free CRF-002 Mock Exam – Practice Online Confidently

Buying Options: