D-CSF-SC-01 무료 덤프문제 온라인 액세스

Which of the following would be considered a primary activity under the Recover Function?

• A.Assessing the financial impact of an incident
• B.Implementing access control measures
• C.Conducting vulnerability assessments
• D.Developing incident detection tools

What helps an organization compare an "as-is, to-be" document and identify opportunities for improving cybersecurity posture useful for capturing organizational baselines of today and their desired state of tomorrow so that a gap analysis can be conducted?

• A.Assessment
• B.Framework
• C.Core
• D.Profile

Which of the following are components of the Protect Function in the NIST Framework? (Select two)

• A.Incident Response Planning
• B.Data Security
• C.Recovery Strategy
• D.Awareness Training

Match the following components of the Identify Function with their main purpose.
Component
Asset Inventory
Risk Assessment
Classification Controls
Business Impact Analysis
Purpose
A) Listing and updating assets needing cybersecurity
B) Determining likelihood and impact of cybersecurity risks
C) Categorizing assets based on criticality
D) Identifying essential business functions for recovery

• A.Asset Inventory - A
  Risk Assessment - B
  Classification Controls - D
  Business Impact Analysis - C
• B.Asset Inventory - D
  Risk Assessment - C
  Classification Controls - B
  Business Impact Analysis - A
• C.Asset Inventory - A
  Risk Assessment - C
  Classification Controls - B
  Business Impact Analysis - D
• D.Asset Inventory - A
  Risk Assessment - B
  Classification Controls - C
  Business Impact Analysis - D

Which NIST Cybersecurity Framework function helps organizations restore normal operations after a cybersecurity incident?

• A.Recover
• B.Detect
• C.Protect
• D.Respond