Question 1

Which of the following statements about the NIST Cybersecurity Framework is not true?

Accepted Answer

A)  One of the main goals is to address and manage cybersecurity risk in a cost-effective way to protect critical infrastructure. 
B)  It is aimed to replace an existing risk management process and cybersecurity program in an organization. 
C)  An organization that doesn't have an existing cybersecurity program can use the NIST Cybersecurity Framework as a reference to develop such a program. 
D)  The NIST Cybersecurity Framework is developed with a common taxonomy. 
A)  One of the main goals is to address and manage cybersecurity risk in a cost-effective way to protect critical infrastructure. 
B)  It is aimed to replace an existing risk management process and cybersecurity program in an organization. 
C)  An organization that doesn't have an existing cybersecurity program can use the NIST Cybersecurity Framework as a reference to develop such a program. 
D)  The NIST Cybersecurity Framework is developed with a common taxonomy. B

Question 2

NIST's Cybersecurity Framework is divided into three parts, including all but which of the following?

Accepted Answer

A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles 
A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles C

Question 3

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 4?

Accepted Answer

A)  Risk-Informed 
B)  Partial 
C)  Adaptive 
D)  Repeatable 
A)  Risk-Informed 
B)  Partial 
C)  Adaptive 
D)  Repeatable C

Question 4

Which part of the NIST Cybersecurity Framework is designed to help organizations view and understand the characteristics of their approach to managing cybersecurity risk?

Accepted Answer

A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles 
A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles

Question 5

The NIST Cybersecurity Framework was developed by which of the following?

Accepted Answer

A)  U.S. government 
B)  Corporations 
C)  Individuals 
D)  All of the above 
A)  U.S. government 
B)  Corporations 
C)  Individuals 
D)  All of the above

Question 6

Which of the following is not a supported export file format for current viewed data in the NIST CSF Reference Tool?

Accepted Answer

A)  XML files 
B)  Adobe PDF files 
C)  Tab-separated text files 
D)  Comma-separated text files 
A)  XML files 
B)  Adobe PDF files 
C)  Tab-separated text files 
D)  Comma-separated text files

Question 7

The NIST Cybersecurity Framework (CSF) Reference Tool can run in which of the following operating systems?

Accepted Answer

A)  Microsoft Windows and Linux 
B)  Apple Mac OS-X and Linux 
C)  Microsoft Windows and Apple Mac OS-X 
D)  Microsoft Windows, Apple Mac OS-X, and Linux 
A)  Microsoft Windows and Linux 
B)  Apple Mac OS-X and Linux 
C)  Microsoft Windows and Apple Mac OS-X 
D)  Microsoft Windows, Apple Mac OS-X, and Linux

Question 8

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 2?

Accepted Answer

A)  Adaptive 
B)  Repeatable 
C)  Risk-Informed 
D)  Partial 
A)  Adaptive 
B)  Repeatable 
C)  Risk-Informed 
D)  Partial

Question 9

Which function defined in the NIST Cybersecurity Framework Core provides guidance on how to recover normal operations after a cybersecurity incident?

Accepted Answer

A)  Respond 
B)  Detect 
C)  Identify 
D)  Recover 
A)  Respond 
B)  Detect 
C)  Identify 
D)  Recover

Question 10

The NIST CSF Reference Tool provides a way for you to browse the Framework Core by which of the following?

Accepted Answer

A)  Categories 
B)  Functions 
C)  Informative references 
D)  All of the above 
A)  Categories 
B)  Functions 
C)  Informative references 
D)  All of the above

Question 11

Which of the following is not one of the three levels NIST defines within an organization that should coordinate the framework implementation and a common flow of information?

Accepted Answer

A)  Management 
B)  Implementation/Operations 
C)  Executive 
D)  Business/Process 
A)  Management 
B)  Implementation/Operations 
C)  Executive 
D)  Business/Process

Question 12

Which of the following is the first step in NIST's recommended steps to establish or improve a cybersecurity program?

Accepted Answer

A)  Create a current profile 
B)  Prioritize and scope 
C)  Create a target profile 
D)  Conduct a risk assessment 
A)  Create a current profile 
B)  Prioritize and scope 
C)  Create a target profile 
D)  Conduct a risk assessment

Question 13

Which category in the Identify function of the NIST Cybersecurity Framework Core addresses the need for an organization's mission, objectives, stakeholders, and activities to be comprehended and prioritized?

Accepted Answer

A)  Business Environment 
B)  Governance 
C)  Risk Assessment 
D)  Asset Management 
A)  Business Environment 
B)  Governance 
C)  Risk Assessment 
D)  Asset Management

Question 14

NIST created a(n) __________ that allows you to start reviewing and documenting each of the framework's functions, categories, subcategories, and informative references.

Accepted Answer

A)  spreadsheet 
B)  database 
C)  presentation 
D)  XML file 
A)  spreadsheet 
B)  database 
C)  presentation 
D)  XML file

Question 15

Which of the following is the last step in NIST's recommended steps to establish or improve a cybersecurity program?

Accepted Answer

A)  Implement the action plan 
B)  Orient your strategy 
C)  Determine, analyze, and prioritize any gaps 
D)  Create a target profile 
A)  Implement the action plan 
B)  Orient your strategy 
C)  Determine, analyze, and prioritize any gaps 
D)  Create a target profile

Question 16

Which of the following statements about the NIST Cybersecurity Framework is true?

Accepted Answer

A)  It was created in the U.S. and is used exclusively within the U.S. 
B)  It was created in the U.S. and is also used outside of the U.S. 
C)  It was created outside of the U.S. and is used worldwide. 
D)  None of the above 
A)  It was created in the U.S. and is used exclusively within the U.S. 
B)  It was created in the U.S. and is also used outside of the U.S. 
C)  It was created outside of the U.S. and is used worldwide. 
D)  None of the above

Question 17

Which function defined in the NIST Cybersecurity Framework Core includes the categories and subcategories that define what processes and assets need protection?

Accepted Answer

A)  Detect 
B)  Identify 
C)  Protect 
D)  Respond 
A)  Detect 
B)  Identify 
C)  Protect 
D)  Respond

Question 18

Which part of the NIST Cybersecurity Framework provide guidance to allow organizations to analyze cybersecurity risk and to enhance their processes to manage such risk?

Accepted Answer

A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles 
A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Outcomes 
D)  The Framework Profiles

Question 19

Which part of the NIST Cybersecurity Framework is designed to help an organization align its cybersecurity undertakings with business requirements, risk tolerances, and resources?

Accepted Answer

A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Profiles 
D)  The Framework Outcomes 
A)  The Framework Tiers 
B)  The Framework Core 
C)  The Framework Profiles 
D)  The Framework Outcomes

Question 20

Which category in the Protect function of the NIST Cybersecurity Framework Core provides guidance around data management practices in order to protect the confidentiality, integrity, and availability of such data?

Accepted Answer

A)  Awareness and Training 
B)  Protective Technology 
C)  Maintenance 
D)  Data Security 
A)  Awareness and Training 
B)  Protective Technology 
C)  Maintenance 
D)  Data Security

Which of the following statements about the NIST Cybersecurity Framework is not true?

NIST's Cybersecurity Framework is divided into three parts, including all but which of the following?

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 4?

Which part of the NIST Cybersecurity Framework is designed to help organizations view and understand the characteristics of their approach to managing cybersecurity risk?

The NIST Cybersecurity Framework was developed by which of the following?

Which of the following is not a supported export file format for current viewed data in the NIST CSF Reference Tool?

The NIST Cybersecurity Framework (CSF) Reference Tool can run in which of the following operating systems?

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 2?

Which function defined in the NIST Cybersecurity Framework Core provides guidance on how to recover normal operations after a cybersecurity incident?

The NIST CSF Reference Tool provides a way for you to browse the Framework Core by which of the following?

Which of the following is not one of the three levels NIST defines within an organization that should coordinate the framework implementation and a common flow of information?

Which of the following is the first step in NIST's recommended steps to establish or improve a cybersecurity program?

Which category in the Identify function of the NIST Cybersecurity Framework Core addresses the need for an organization's mission, objectives, stakeholders, and activities to be comprehended and prioritized?

NIST created a(n) __________ that allows you to start reviewing and documenting each of the framework's functions, categories, subcategories, and informative references.

Which of the following is the last step in NIST's recommended steps to establish or improve a cybersecurity program?

Which of the following statements about the NIST Cybersecurity Framework is true?

Which function defined in the NIST Cybersecurity Framework Core includes the categories and subcategories that define what processes and assets need protection?

Which part of the NIST Cybersecurity Framework provide guidance to allow organizations to analyze cybersecurity risk and to enhance their processes to manage such risk?

Which part of the NIST Cybersecurity Framework is designed to help an organization align its cybersecurity undertakings with business requirements, risk tolerances, and resources?

Which category in the Protect function of the NIST Cybersecurity Framework Core provides guidance around data management practices in order to protect the confidentiality, integrity, and availability of such data?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Filters

Exam 16: Nist Cybersecurity Framework

Which of the following statements about the NIST Cybersecurity Framework is not true?

NIST's Cybersecurity Framework is divided into three parts, including all but which of the following?

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 4?

Which part of the NIST Cybersecurity Framework is designed to help organizations view and understand the characteristics of their approach to managing cybersecurity risk?

The NIST Cybersecurity Framework was developed by which of the following?

Which of the following is not a supported export file format for current viewed data in the NIST CSF Reference Tool?

The NIST Cybersecurity Framework (CSF) Reference Tool can run in which of the following operating systems?

In the NIST Cybersecurity Framework Tiers, which of the following Framework Implementation Tiers is labeled Tier 2?

Which function defined in the NIST Cybersecurity Framework Core provides guidance on how to recover normal operations after a cybersecurity incident?

The NIST CSF Reference Tool provides a way for you to browse the Framework Core by which of the following?

Which of the following is not one of the three levels NIST defines within an organization that should coordinate the framework implementation and a common flow of information?

Which of the following is the first step in NIST's recommended steps to establish or improve a cybersecurity program?

Which category in the Identify function of the NIST Cybersecurity Framework Core addresses the need for an organization's mission, objectives, stakeholders, and activities to be comprehended and prioritized?

NIST created a(n) __________ that allows you to start reviewing and documenting each of the framework's functions, categories, subcategories, and informative references.

Which of the following is the last step in NIST's recommended steps to establish or improve a cybersecurity program?

Which of the following statements about the NIST Cybersecurity Framework is true?

Which function defined in the NIST Cybersecurity Framework Core includes the categories and subcategories that define what processes and assets need protection?

Which part of the NIST Cybersecurity Framework provide guidance to allow organizations to analyze cybersecurity risk and to enhance their processes to manage such risk?

Which part of the NIST Cybersecurity Framework is designed to help an organization align its cybersecurity undertakings with business requirements, risk tolerances, and resources?

Which category in the Protect function of the NIST Cybersecurity Framework Core provides guidance around data management practices in order to protect the confidentiality, integrity, and availability of such data?

Understanding Cybersecurity Policy and Governance

Cybersecurity Policy Organization, Format, and Styles

Cybersecurity Framework

Governance and Risk Management

Asset Management and Data Loss Prevention

Human Resources Security

Physical and Environmental Security

Communications and Operations Security

Access Control Management

Information Systems Acquisition, Development, and Maintenance

Cybersecurity Incident Response

Business Continuity Management

Regulatory Compliance for Financial Institutions

Regulatory Compliance for the Health-Care Sector

PCI Compliance for Merchants

Filters