Module 2 - 02-3

Question 1

What does NIST stand for?

Answer 1

National Institute of Standards and Technology (NIST)

Question 2

What does CSF stand for?

Answer 2

Cybersecurity Framework (CSF)

Question 3

What does NIST CSF stand for?

Answer 3

National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)

Question 4

Define National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)

Answer 4

A voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk

Question 5

What NIST CSF expands into the protection of the United States federal government?

Answer 5

NIST special publication, or S.P. 800-53

Question 6

Define NIST S.P. 800-53

Answer 6

A unified framework for protecting the security of information systems within the federal government

(including the systems provided by private companies for federal government use)

The security controls provided by this framework are used to maintain the CIA triad for those systems used by the government.

Question 7

What are the five core functions of the NIST CSF?

Answer 7

1) Identify
2) Protect
3) Detect
4) Respond
5) Recover

Question 8

How do the five core functions of the NIST CSF help organizations?

Answer 8

These core functions help organizations manage cybersecurity risks, implement risk management strategies, and learn from previous mistakes.

They are key for making sure an organization is protected against potential threats, risks, and vulnerabilities.

Question 9

What is the first (1st) core function of the NIST CSF?

Answer 9

1) Identify

Question 10

What is the second (2nd) core function of the NIST CSF?

Answer 10

2) Protect

Question 11

What is the third (3rd) core function of the NIST CSF?

Answer 11

3) Detect

Question 12

What is the fourth (4th) core function of the NIST CSF?

Answer 12

4) Respond

Question 13

What is the fifth (5th) core function of the NIST CSF?

Answer 13

5) Recover

Question 14

Define Identify

Answer 14

The management of cybersecurity risk and its effect on an organization’s people and assets

Question 15

Define Protect

Answer 15

The strategy used to protect an organization through the implementation of policies, procedures, training, and tools that help mitigate cybersecurity threats

Question 16

Define Detect

Answer 16

Identifying potential security incidents and improving monitoring capabilities to increase the speed and efficiency of detections

Question 17

Define Respond

Answer 17

Making sure that the proper procedures are used to contain, neutralize, and analyze security incidents, and implement improvements to the security process

Question 18

Define Recover

Answer 18

The process of returning affected systems back to normal operation

Question 19

What is the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)?

A required business framework for ensuring security updates and repairs are successful
Standards, guidelines, and best practices that organizations follow voluntarily in order to manage cybersecurity risk
A collection of security principles focused on maintaining confidentiality, integrity, and availability
A set of security controls that help analysts determine what to do if a data breach occurs

Answer 19

Standards, guidelines, and best practices that organizations follow voluntarily in order to manage cybersecurity risk

The NIST CSF is a voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk.

Question 20

The five core functions that make up the CSF are: identify, protect, detect, _____, and recover.

regulate
reevaluate
reflect
respond

Answer 20

respond

Question 21

The CSF _____ function relates to monitoring systems and devices in an organization’s internal network to help security teams manage potential cybersecurity risks and their effects.

respond
protect
identify
recover

Answer 21

identify

Question 22

What does a security analyst’s work involve during the CSF recover function?

Protect an organization through the implementation of employee training
Return affected systems back to normal operation
Pinpoint threats and improve monitoring capabilities
Contain, neutralize, and analyze security incidents

Answer 22

Return affected systems back to normal operation