Question 1

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

Options :

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Question 2

A company's IT department has identified an increase in phishing attacks targeting employees. To address this cybersecurity risk, what strategic action should be included in their comprehensive cybersecurity strategy?

Options :

A : Outsource all email management to a third-party provider without implementing additional security measures

B : Upgrade the physical security systems within company facilities

C : Decrease the frequency of network security audits to allocate more resources to training and other phishing defenses

D : Implement a continuous employee training program focused on recognizing and responding to phishing attempts

Answer: D

Question 3

A financial services firm has established and documented cybersecurity policies and procedures that are consistently implemented across all branches. They conduct regular training sessions and audits to ensure that these practices are maintained and effective. What tier best describes their cybersecurity implementation?

Options :

A : Tier 1 (Partial)

B : Tier 2 (Risk Informed)

C : Tier 3 (Repeatable)

D : Tier 4 (Adaptive)

Answer: C

Question 4

What is the benefit of comparing an organization's current profile against its target profile?

Options :

A : To determine the return on investment for the information technology and cybersecurity department budgets

B : To fulfill the organization-s mandatory reporting requirements to regulatory agencies and legal bodies

C : To identify discrepancies between current practices and desired outcomes, guiding focused improvements

D : To evaluate the performance of the cybersecurity tools currently in use within the organization

Answer: C

Question 5

Which of the following information security publications provides guidelines for secure web application development and is aligned with outcomes listed in the NIST Cybersecurity Framework?

Options :

A : PCI-DSS

B : HIPAA

C : FedRAMP

D : OWASP

Answer: D

Free CRF-002 Mock Exam – Practice Online Confidently

Buying Options: