Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

PCS - CCSA - Certified Cyber Security Architect > Module 1 > Flashcards

Module 1 Flashcards

1
Q

what are the NIST CSF (cybersecurity framework) tiers?

A

tier 1 -Partial
Tier 2 - risk informed
tier 3 - Repeatable
tier 4 - Adaptable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

list the 2 NIST profiles and describe them

A

current profile - “as is “ state of system cybersecurity

Target profile - the desired outcome “to be” state of cybersecurity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

what could you gain by comparing current profile with target profile

A

gaps in your cybersecurity that need to be addressed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

NIST cybersecurity framework Tier 3 explain

A

Repeatable -

  • – risk management practices are formally approved and expressed as policy
  • – cybersecurity practices are regularly updated based on risk management processes and changing threat landscape
  • – organization-wide approach to manage cybersecurity
  • – risk informed policies, processes, and procedures are defined implemented as intended and reviewed.
  • –senior executives ensure consideration of cybersecurity through all lines of operation
  • – the organization understands its role, dependencies, and dependents in the larger ecosystem.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

NIST cybersecurity framework tier 4, explain

A

Adaptive -

  • – Risk Management process
  • – org adapts its cyvbersecrui9ty practices based on previous and current cybersecurity activities, including lessons learned and predictive indicators
  • – organization actively adapts to a changing threat and technology landscape and response in a timely and effective manner.
  • – integrated risk management -
  • – organization wide approach to managing cybersecurity risk that uses risk-informed policies, processes, and procedures to address potential cybersecurity events.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what are the 4 NIST framework core elements

A

Functions
Categories
subcategories
Informative References

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

explain the role of functions within the NIST framework

A

Functions - organize basic cyber security activities at their highest level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

explain the role of categories within the NIST framework

A

categories - are the subdivisions of a function into groups of cybersecurity outcomes closely tied to programmatic needs and particular activities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

what is: further divide a category into specific outcomes of technical and/or management activities

  1. function
  2. category
  3. sub-category
  4. informative references
A

subcategories

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

explain the role of informational references within the NIST framework

A

informative references - are specific sections of standards, guidelines, and practices common among critical infrastructure associated with each subcategory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what are the 5 functions in the NIST cybersecurity framework

A
  1. Identify
  2. protect
  3. detect - in a timely manner… 72hrs or less per GDPR
  4. respond
  5. recover
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

what NIST Cybersecurity framework function would this describe:
develop an organizational understanding to manage cybersecurity risk to system, people, assets, data and capabilities

A
  1. Identify
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

what NIST cybersecurity framework function would be: develop and implement appropriate safeguards to ensure deliver of critical infrastructure services

A
  1. Protect
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

what NIST Cybersecurity Framework function would be defined as:
Develop and implement appropriate activities to identify the occurrence of a cybersecurity event

A
  1. Detect
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

what cybersecurity framework function would be: develop and implement appropriate activities to take action regarding a detected cybersecurity incident

A
  1. Respond
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

what NIST CSF function would be: develop and implement appropriate activities to maintain plans for resilience and to restore any capabilities or services that were impaired due to the cybersecurity incident

A
  1. Recovery
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

list the 4 NIST framework core features

A

1, functions

  1. categories
  2. subcategories
  3. informative references
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q 
what function would these categories belong to?
asset management
business environment
governance 
risk assessment
risk management strategy
supply chain risk management
A

Identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

what function would these categories belong to?
identify management and access control
awareness training
data security
information protection processes and procedures
maintenance
protective technology

A

Protect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

what function would these categories belong to?
anomalies and events
security continuous monitoring
detection processes

A

Detect

21
Q 
what function would these categories belong to?
response planning
communications
analysis
mitigation 
improvements
A

Respond

22
Q

what function would these categories belong to?
recovery planning
improvements
communication

A

Recover

23
Q

who controls the CMMC 2.0 model?

A

DoD

24
Q

security incident response lifecycle includes these four areas

A
  1. Preparation
  2. detection and analysis
  3. containment, eradication & recovery
  4. post incident activity
25
Q

what clause/section in the ISO 27001 standard addresses encryption

A

cryptography

26
Q

what is the purpose of the NIST cybersecurity framework

A

to help organizations understand their cybersecurity risks and how to reduce risks with customized measures

27
Q

define federal contract information (FCI)

A

information, not intended for public release, provided by or generated for the government under a contract to develop or deliver a product or service to the government

28
Q

4 steps in Incident security

A
  1. Preparation
  2. detection and analysis
  3. containment, eradication, and recovery
  4. post-incident activity
29
Q

this NIST publication is titled “guide to storage encryption technologies for end user devices” and describes valid encryption processes for data at rest

A

NIST publication 800-111

30
Q

when NIST cybersecurity framework moved from 1.1 to 1.2 what was added under Identify

A

supply chain risk management

31
Q

NIST cybersecurity framework how many functions, categories and sub-categories

A 
functions = 5
categories = 23
sub-categories = 108
32
Q

NIST cybersecurity framework how many tiers and profiles

A 
tiers = 4
profiles = 2
33
Q

additional definition to NIST profile

A

a framework profile represents the outcomes based on the business needs an organization has selected from the framework categories and subcategories

34
Q

define tier 3 - repeatable

A

repeatable processes are in place to counter threats. formal risk-management processes and clearly defined security policies - cybersecurity practices are regularly updated - organization wide approach

35
Q

define the NIST tier 4 - adaptable

A

continuous improvements and adaptation - regularly conduct risk assessments and adapt security policies and procedures to counter the latest threats - advanced analytics and best practices - organization wide approach - actively adapts to a changing threat and technology landscape

36
Q

define the NIST tier 2 - risk informed

A

risk management practices are approved by management - might not be an organization wide policy on risk management - key stakeholders are aware of the main risks - few controls and policies in place

37
Q

define the NIST tier 1 - partial

A

lowest tier, cybersecurity risk management has not been formalized and documented - threats are encountered on an ad hoc basis - the organization does not understand its role in the larger ecosystem - limited cybersecurity awareness

38
Q

A framework implementation tier is a rating that provides what?

A

context on how an organization views cybersecurity risks and the processes they have in place to mange that risk

39
Q

CMMC 2.0 level 1 is focused on what

A

federal contract information (FCI)

40
Q

preservation is defined as

A

process to maintain and safeguard the integrity and original condition of potential evidence

41
Q

a framework implementation tier is a rating that provides what

A

context on how an organization views cybersecurity risk and the processes they have in place to manage that risks

42
Q

what is CMMC level 1 focus on

A

FCI (federal contract information)

43
Q

what is CMMC level 2 focus on

A

CUI (controlled unclassified information)

44
Q

what NIST CSF function would be: develop the organization understanding to manage cybersecurity risk to system , assets, data and capabilities

A
  1. identify
45
Q

what NIST CSF function would be: develop and implement the appropriate safeguards to ensure deliver of critical infrastructure services

A
  1. Protect
46
Q

what NIST CSF function would be: develop and implement the appropriate activities to take action regarding a detected cybersecurity event

A
  1. Respond
47
Q

what NIST CSF function would be: Develop and implement that appropriate activities to maintain plan for resilience and to restore any capabilities or services that were impaired due to a cybersecurity event

A

5: Recover

48
Q

what function would have the following categories:
recovery planning
improvements
communication

A
  1. Recover

PCS - CCSA - Certified Cyber Security Architect (9 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions