Question 1

A healthcare provider is enhancing its cybersecurity policies to better protect patient information, particularly by implementing stricter access controls and auditing mechanisms to detect any unauthorized access or data manipulation. This is part of their compliance efforts with health data protection regulations. Which subcategory in the NIST Cybersecurity Framework could best guide the implementation of these stricter access controls and auditing mechanisms?

Options :

A : PR.AA-05

B : DE.AE-02

C : GV.OV-01

D : PR.AT-02

Answer: A

Question 2

Which of the following best describes the purpose of the Asset Management (ID.AM) category?

Options :

A : To audit and assess the efficiency of an organization-s cybersecurity measures

B : To provide financial resources for proposed cybersecurity improvements

C : To identify and manage all assets that support organizational objectives

D : To implement technical controls and defenses for digital and physical assets

Answer: C

Question 3

Which of the following is a goal within the Detect function of the NIST Cybersecurity Framework?

Options :

A : To establish processes for identifying cybersecurity events

B : To restore services and capabilities after a cybersecurity incident

C : To develop strategies for reacting to a cybersecurity incident

D : To ensure continuous monitoring to find cybersecurity events quickly

Answer: D

Question 4

Which of the following information security publications provides guidelines for secure web application development and is aligned with outcomes listed in the NIST Cybersecurity Framework?

Options :

A : PCI-DSS

B : HIPAA

C : FedRAMP

D : OWASP

Answer: D

Question 5

What is the benefit of comparing an organization's current profile against its target profile?

Options :

A : To determine the return on investment for the information technology and cybersecurity department budgets

B : To fulfill the organization-s mandatory reporting requirements to regulatory agencies and legal bodies

C : To identify discrepancies between current practices and desired outcomes, guiding focused improvements

D : To evaluate the performance of the cybersecurity tools currently in use within the organization

Answer: C

Confidently Practice Online with Free CRF-002 Exam Cram

Buying Options: