D-CSF-SC-23 무료 덤프문제 온라인 액세스

Refer to the exhibit.

Your organization's security team has been working with various business units to understand their business requirements, risk tolerance, and resources used to create a Framework Profile. Based on the Profile provided, what entries correspond to labels A, B, and C?

• A.Option B
• B.Option C
• C.Option A

You have completed a review of your current security baseline policy. In order to minimize financial, legal, and reputational damage, the baseline configuration requires that infrastructure be categorized for the BIA.
Which categorizations are necessary for the BIA?

• A.Mission critical and business critical only
• B.Mission critical and safety critical only
• C.Security critical, safety critical, and business critical
• D.Mission critical, safety critical, and business critical

Which document is designed to limit damage, reduce recovery time, and reduce costs where possible to the organization?

• A.Incident Response Plan
• B.Business Continuity Plan
• C.Business Impact Analysis
• D.Risk Assessment Strategy

Which NIST Cybersecurity Framework function should be executed before any others?

• A.Respond
• B.Protect
• C.Recover
• D.Identify

What is considered outside the scope of a BIA?

• A.Efficiency and effectiveness of existing risk mitigation controls
• B.Selection of full, incremental, or differential backups
• C.Estimated probability of the identified threats actually occurring
• D.Determination of capacity requirements for backups