Question 1

Which of the following information security publications provides standards for cloud service providers' security measures and can be used to complement the NIST Cybersecurity Framework outcomes for cloud migrations and adoptions?

Options :

A : FedRAMP

B : PCI-DSS

C : HIPAA

D : OWASP

Answer: A

Question 2

How do subcategories in the NIST Cybersecurity Framework assist organizations in managing their cybersecurity risks?

Options :

A : By mandating the types of cybersecurity training programs that must be conducted

B : By serving as independent compliance standards that organizations must follow

C : By providing a checklist of cybersecurity measures to be implemented immediately

D : By outlining specific actions to achieve the security outcomes of each framework category

Answer: D

Question 3

In what way does the NIST Cybersecurity Framework's nature impact its adoption across various industries and sectors, including critical infrastructure and small businesses?

Options :

A : Mandates compliance which could strain resources for sectors not typically targeted by cybersecurity regulations

B : Limits its use strictly to government entities required to implement it by regulation to maintain compliance throughout organizations

C : Encourages a wider adoption by allowing organizations to tailor the guidelines to their specific needs and capabilities

D : Discourages small businesses from adopting it due to the perceived complexity and cost which ensures its elite status

Answer: C

Question 4

A healthcare provider is enhancing its cybersecurity policies to better protect patient information, particularly by implementing stricter access controls and auditing mechanisms to detect any unauthorized access or data manipulation. This is part of their compliance efforts with health data protection regulations. Which subcategory in the NIST Cybersecurity Framework could best guide the implementation of these stricter access controls and auditing mechanisms?

Options :

A : PR.AA-05

B : DE.AE-02

C : GV.OV-01

D : PR.AT-02

Answer: A

Question 5

Which of the following is a goal within the Detect function of the NIST Cybersecurity Framework?

Options :

A : To establish processes for identifying cybersecurity events

B : To restore services and capabilities after a cybersecurity incident

C : To develop strategies for reacting to a cybersecurity incident

D : To ensure continuous monitoring to find cybersecurity events quickly

Answer: D

Confidently Practice Online with Free CRF-002 Exam Cram

Buying Options: