When aligning to the NIST Cybersecurity Framework, what should occur after tier levels and framework core outcomes are determined?
Correct Answer: C
Explanation:
According to the NIST Cybersecurity Framework, after determining the tier levels and framework core outcomes, the next step is to compare the current and target profiles, which describe the organization’s current and desired cybersecurity posture based on the framework core functions, categories, and subcategories 1 . This comparison helps to identify the gaps and prioritize the actions for improvement 2 . References Cybersecurity Framework Components | NIST What is the NIST Cybersecurity Framework? | IBM
Question 2
Analysis is one of the categories within which of the following Core Functions?
Correct Answer: B
Explanation:
Anomalies and Events is one of the six categories within the Detect function of the NIST Cybersecurity Framework. The Anomalies and Events category aims to ensure that anomalous activity is detected in a timely manner and the potential impact of events is understood 1 2 . References: 1 : The Five Functions | NIST 2 : Detect | NIST
Question 3
During CSF implementation, when is an information security manager MOST likely to identify key enterprise and supporting alignment goals as previously understood?
Correct Answer: B
Explanation:
This CSF step corresponds to the COBIT objective of knowledge and understanding of enterprise goals, because it involves identifying the business drivers, mission, objectives, and risk appetite of the organization, as well as the scope and boundaries of the cybersecurity program 1 2 . This step helps to ensure that the cybersecurity activities and outcomes are aligned with the enterprise goals and strategy 3 4 .
References: 1 : Cybersecurity Framework Components | NIST 2 : Implementing the NIST Cybersecurity Framework Using COBIT 2019 | ISACA 3 : COBIT 2019 Design and Implementation COBIT Implementation 4 : COBIT® 2019 Foundation | Skillsoft Global Knowledge
Demo Practice Mode
You are viewing only the questions marked as Demo.