Dell NIST Cybersecurity Framework 2.0 (D-CSF-SC-01) Free Practice Test

Question 1

Match the following components of the Identify Function with their main purpose.
Component
Asset Inventory
Risk Assessment
Classification Controls
Business Impact Analysis
Purpose
A) Listing and updating assets needing cybersecurity
B) Determining likelihood and impact of cybersecurity risks
C) Categorizing assets based on criticality
D) Identifying essential business functions for recovery

A. Asset Inventory - A
Risk Assessment - B
Classification Controls - D
Business Impact Analysis - C

B. Asset Inventory - A
Risk Assessment - B
Classification Controls - C
Business Impact Analysis - D

C. Asset Inventory - A
Risk Assessment - C
Classification Controls - B
Business Impact Analysis - D

D. Asset Inventory - D
Risk Assessment - C
Classification Controls - B
Business Impact Analysis - A

Correct Answer: B

Question 2

Which type of risk has the potential for the largest monetary impact to an organization?

A. Criminal

B. Litigation

C. Operational

D. Governance

Correct Answer: B

Question 3

Refer to the exhibit. Your organization's security team has been working with various business units to understand their business requirements, risk tolerance, and resources used to create a Framework Profile. Based on the Profile provided, what entries correspond to labels A, B, and C?

A. Option C

B. Option A

C. Option B

Correct Answer: B

Question 4

Which NIST Cybersecurity Framework function should be executed before any others?

A. Respond

B. Recover

C. Identify

D. Protect

Correct Answer: C

Question 5

COBIT 2019 complements the NIST Cybersecurity Framework by focusing on what aspect of cybersecurity risk management?

A. Monitoring technical network controls

B. Ensuring incident response

C. Governance and oversight

D. Increasing encryption strength

Correct Answer: C

Question 6

Which NIST Cybersecurity Framework tier describes an organization that adapts its cybersecurity practices based on evolving threats?

A. Tier 3: Repeatable

B. Tier 2: Risk-Informed

C. Tier 1: Partial

D. Tier 4: Adaptive

Correct Answer: D

Question 7

What is a recommended usage of the Detect function?

A. Implement following the Protect Function

B. Remain confidential to IT management

C. Communicate to appropriate levels

D. Eliminate risks among systems

Correct Answer: C

Question 8

The Backup Recovery Plan is dependent on what effort?

A. PR.DS

B. BIA

C. SDLC

D. RTO

Correct Answer: D

Question 9

The Identify Function helps establish a ___________ to assess and categorize organizational assets by their importance.

A. Security awareness program

B. Risk mitigation strategy

C. Comprehensive inventory

D. Baseline configuration

Correct Answer: C

Question 10

The NIST Cybersecurity Framework relies on which of the following to guide organizations through effective cybersecurity risk management?

A. Tiers and Profiles

B. Incident Response Plans

C. Vendor Management Frameworks

D. Network Architecture Policies

Correct Answer: A

Question 11

What is highlighted by the Cyber Resilient Lifecycle?

A. Security Reference Architecture

B. Incident Response Plan

C. Disaster Recovery Plan

D. Business Intelligence Analysis

Correct Answer: A

Welcome to TestSimulate

EMC Dell NIST Cybersecurity Framework 2.0 (D-CSF-SC-01) Free Practice Test