QUESTION: 9

Which mechanism within the NIST Cybersecurity Framework describes a method to capture the current state and define the target state for understanding gaps, exposure, and prioritize changes to mitigate risk?

Functions
Profiles
Tiers
Categories

Answer(s): C

Reveal Solution Next Question

QUESTION: 10

The CSF recommends that the Communication Plan for an IRP include audience, method of communication, frequency, and what other element?

Incident category
Message criteria
Incident severity
Templates to use

Answer(s): B

Reference:

https://www.utc.edu/information-technology/pdfs/it-comm-plan-master-2017.pdf (p.4)

Reveal Solution Next Question

QUESTION: 11

What is the main goal of a gap analysis in the Identify function?

Determine security controls to improve security measures
Determine actions required to get from the current profile state to the target profile state
Identify gaps between Cybersecurity Framework and Cyber Resilient Lifecycle pertaining to that function
Identify business process gaps to improve business efficiency

Answer(s): B

Reveal Solution Next Question

QUESTION: 12

DRAG DROP
Rank order the relative severity of impact to an organization of each plan, where “1” signifies the most impact and “4” signifies the least impact.

Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

Free DES-9131 Exam Braindumps (page: 4)

QUESTION: 9

QUESTION: 10

Reference:

QUESTION: 11

QUESTION: 12

Explanation:

DES-9131 Discussions & Posts