Module 2 - 02-3

Question 1

What does NIST stand for?

Answer 1

National Institute of Standards and Technology (NIST)

Question 2

What does CSF stand for?

Answer 2

Cybersecurity Framework (CSF)

Question 3

What does NIST CSF stand for?

Answer 3

National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)

Question 4

Define National Institute of Standards and Technology Cybersecurity Framework (NIST CSF)

Answer 4

A voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk

Question 5

What NIST CSF expands into the protection of the United States federal government?

Answer 5

NIST special publication, or S.P. 800-53

Question 6

Define NIST S.P. 800-53

Answer 6

A unified framework for protecting the security of information systems within the federal government

(including the systems provided by private companies for federal government use)

The security controls provided by this framework are used to maintain the CIA triad for those systems used by the government.

Question 7

What are the five core functions of the NIST CSF?

Answer 7

1) Identify
2) Protect
3) Detect
4) Respond
5) Recover

Question 8

How do the five core functions of the NIST CSF help organizations?

Answer 8

These core functions help organizations manage cybersecurity risks, implement risk management strategies, and learn from previous mistakes.

They are key for making sure an organization is protected against potential threats, risks, and vulnerabilities.

Question 9

What is the first (1st) core function of the NIST CSF?

Answer 9

1) Identify

Question 10

Define Identify

Answer 10

The management of cybersecurity risk and its effect on an organization’s people and assets

Question 11

What is the second (2nd) core function of the NIST CSF?

Answer 11

2) Protect

Question 12

Define Protect

Answer 12

The strategy used to protect an organization through the implementation of policies, procedures, training, and tools that help mitigate cybersecurity threats

Question 13

What is the third (3rd) core function of the NIST CSF?

Answer 13

3) Detect

Question 14

Define Detect

Answer 14

Identifying potential security incidents and improving monitoring capabilities to increase the speed and efficiency of detections

Question 15

What is the fourth (4th) core function of the NIST CSF?

Answer 15

4) Respond

Question 16

Define Respond

Answer 16

Making sure that the proper procedures are used to contain, neutralize, and analyze security incidents, and implement improvements to the security process

Question 17

What is the fifth (5th) core function of the NIST CSF?

Answer 17

5) Recover

Question 18

Define Recover

Answer 18

The process of returning affected systems back to normal operation

Question 19

What is the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)?

• A required business framework for ensuring security updates and repairs are successful
• Standards, guidelines, and best practices that organizations follow voluntarily in order to manage cybersecurity risk
• A collection of security principles focused on maintaining confidentiality, integrity, and availability
• A set of security controls that help analysts determine what to do if a data breach occurs

Answer 19

Standards, guidelines, and best practices that organizations follow voluntarily in order to manage cybersecurity risk

The NIST CSF is a voluntary framework that consists of standards, guidelines, and best practices to manage cybersecurity risk.

Question 20

The five core functions that make up the CSF are: identify, protect, detect, _____, and recover.

• regulate
• reevaluate
• reflect
• respond

Answer 20

respond

Question 21

The CSF _____ function relates to monitoring systems and devices in an organization’s internal network to help security teams manage potential cybersecurity risks and their effects.

• respond
• protect
• identify
• recover

Answer 21

identify

Question 22

What does a security analyst’s work involve during the CSF recover function?

• Protect an organization through the implementation of employee training
• Return affected systems back to normal operation
• Pinpoint threats and improve monitoring capabilities
• Contain, neutralize, and analyze security incidents

Answer 22

Return affected systems back to normal operation