Question 1

A startup is currently managing cybersecurity issues on an incident-by-incident basis without any predefined strategy. Most decisions are made spontaneously without consulting any established guidelines or standards. What tier best describes their cybersecurity implementation?

Options :

A : Tier 3 (Repeatable)

B : Tier 4 (Adaptive)

C : Tier 1 (Partial)

D : Tier 2 (Risk Informed)

Answer: C

Question 2

Which of the following terms best describes the assurance that digital systems, services, and resources are accessible and usable when needed, without disruptions or services being denied?

Options :

A : Integrity

B : Non-repudiation

C : Availability

D : Confidentiality

Answer: C

Question 3

What advantage does the Cyber Risk Institute (CRI) Profile offer to financial institutions implementing the NIST Cybersecurity Framework?

Options :

A : To provide a uniform cybersecurity training program for all employees within the sector

B : To replace existing financial regulations with a newer and more secure standard

C : To enforce a minimum cybersecurity budget across all financial institutions

D : To align measures with financial regulatory requirements, streamlining compliance efforts

Answer: D

Question 4

A software company identifies a significant risk of source code leaks due to inadequate version control and employee access management. What key elements should be included in their risk management plan to address this issue effectively?

Options :

A : Increase general cybersecurity awareness training, especially social engineering attacks, for all employees.

B : Outsource source code development to external contractors to reduce internal risks

C : Implement robust version control systems and restrict access to sensitive information based on roles and responsibilities

D : Conduct a public relations campaign to reassure stakeholders about data security and emphasize cybersecurity training

Answer: C

Question 5

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

Options :

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Free CRF-002 Mock Exam – Practice Online Confidently

Buying Options: