CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. ISACA
  5. NIST-COBIT-2019

Free NIST-COBIT-2019 Exam Braindumps (page: 3)

Page 2 of 14
PDF with 50 Questions

Which of the following functions provides foundational activities for the effective use of the Cybersecurity Framework?

  1. Protect
  2. Identify
  3. Detect

Answer(s): B

Explanation:

The Identify function provides foundational activities for the effective use of the Cybersecurity Framework, because it assists in developing an organizational understanding of managing cybersecurity risk to systems, people, assets, data, and capabilities12. This understanding enables an organization to focus and prioritize its efforts, consistent with its risk management strategy and business needs12. The Identify function includes outcome categories such as Asset Management, Business Environment, Governance, Risk Assessment, Risk Management Strategy, and Supply Chain Risk Management12.


Reference:

1: The Five Functions | NIST 2: Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide



What does a CSF Informative Reference within the CSF Core provide?

  1. A high-level strategic view of the life cycle of an organization's management of cybersecurity risk
  2. A group of cybersecurity outcomes tied to programmatic needs and particular activities
  3. Specific sections of standards, guidelines, and practices that illustrate a method to achieve an associated outcome

Answer(s): C

Explanation:

A CSF Informative Reference within the CSF Core provides a citation to a related activity from another standard or guideline that can help an organization achieve the outcome described in a CSF Subcategory12. For example, the Informative Reference for ID.AM-1 (Physical devices and systems within the organization are inventoried) is COBIT 5 APO01.01, which states "Maintain an inventory of

IT assets"3.


Reference:

1: Informative

What are they, and how are they used? | NIST 2: Everything to Know About NIST CSF Informative Reference | Axio 3: NIST Cybersecurity Framework v1.1 - CSF Tools
- Identity Digital



Analysis is one of the categories within which of the following Core Functions?

  1. Detect
  2. Respond
  3. Recover

Answer(s): A

Explanation:

Analysis is one of the six categories within the Detect function of the NIST Cybersecurity Framework. The Analysis category aims to identify the occurrence of a cybersecurity event by performing data aggregation, correlation, and analysis12.


Reference:

1: The Five Functions | NIST 2: Cybersecurity Framework Components | NIST



Which of the following is associated with the "Detect" core function of the NIST Cybersecurity Framework?

  1. Information Protection Processes and Procedures
  2. Anomalies and Events
  3. Risk Assessment

Answer(s): B

Explanation:

Anomalies and Events is one of the six categories within the Detect function of the NIST

Cybersecurity Framework. The Anomalies and Events category aims to ensure that anomalous activity is detected in a timely manner and the potential impact of events is understood12.


Reference:

1: The Five Functions | NIST 2: Detect | NIST






Post your Comments and Discuss ISACA NIST-COBIT-2019 exam with other Community members:

NIST-COBIT-2019 Exam Discussions & Posts