Security Frameworks CAS-005 Practice Questions (Page 7)

Questions 31–34

1. 31foundation · easy

   What is the role of subcategories in the NIST CSF Core?

   • AThey list the mandatory controls that must be implemented
   • BThey define the target profiles for an organization
   • CThey describe the implementation tiers of the framework
   • DThey provide specific outcomes that support the achievement of categories and functions
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What do the NIST Cybersecurity Framework implementation tiers describe?

   • AThe maturity and rigor of an organization's cybersecurity risk management practices
   • BThe level of security certification an organization has achieved
   • CThe priority order in which the core functions should be implemented
   • DThe number of security controls an organization has implemented
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which NIST Cybersecurity Framework core function involves developing and implementing appropriate safeguards to ensure delivery of critical services?

   • ARespond
   • BDetect
   • CIdentify
   • DProtect
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A healthcare organization is required to comply with HIPAA and wants to use the NIST Cybersecurity Framework to guide its security program. The compliance officer asks how to align the framework with their specific regulatory requirements. What is the best way to achieve this alignment?

   • AImplement all NIST CSF controls exactly as written to ensure full compliance
   • BUse the NIST CSF as a replacement for HIPAA compliance requirements
   • CAdopt the NIST CSF implementation tiers as compliance levels
   • DCreate a current-state profile and a target-state profile, then compare them to identify gaps
   Reveal Solution Discussion Select an answer first