EMC NIST Cybersecurity Framework 2023 D-CSF-SC-23 Prüfungsfragen mit Lösungen:

1. What activity is supported by the Protect function in the NIST Cybersecurity Framework Core?

A) Take action regarding a detected cybersecurity event
B) Manage cybersecurity risk to systems, assets, and data
C) Ensure resilience and restore services impacted by a cybersecurity event
D) Ensure delivery of critical infrastructure services

2. The project manager of a data center has a budget of $1,500,000 to install critical infrastructure systems. The project will take 24 months to complete.
The project manager is working with the project management team, security experts, and stakeholders to identify cyber risks. After reviewing the project plan, the CIO wants to know why so many risk identification meetings are requested.
What a valid reason for the repeated risk identification meetings?

A) Transfer risk to other project team members
B) Identify new risks
C) Prevent all risk
D) Update the company risk register

3. The CSIRT discovers that an attacker changed some non-encrypted values on a database, causing an e-commerce application to show incorrect prices.
Which part(s) of the CIA Triad was affected on the database?

A) C, A
B) C, I
C) A only
D) A, I

4. A CISO is looking for a solution to lower costs, enhance overall efficiency, and improve the reliability of monitoring security related information.
Which ISCM feature is recommended?

A) Provisioning
B) Collection
C) Automation
D) Reporting

5. A security audit of the systems on a network must be performed to determine their compliance with security policies.
Which control should be used for the audit?

A) ID.AM
B) PR.DS
C) RS.MI
D) DE.CM

Fragen und Antworten: