Define the Reasons Why an Effective Cybersecurity Stance Is Important. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A university wants to protect its research data and ensure that its online learning platform remains accessible to students. The university decides to implement multi-factor authentication, regular data backups, and a security awareness program. Which reason for an effective cybersecurity stance does this combination of measures best support?

   • ATransferring all cybersecurity risk to the students and faculty through the awareness program.
   • BComplying with a specific legal mandate that requires all universities to adopt these exact controls.
   • CEliminating the possibility of any cyber incident affecting the university.
   • DProtecting the confidentiality, integrity, and availability of university assets and services.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A hospital is adopting the NIST CSF to improve its cybersecurity. The CISO wants to prioritize actions based on the potential impact to patient safety and operational continuity. Which NIST CSF practice best supports this risk-management approach?

   • AConducting a business impact analysis to identify critical assets and processes.
   • BHiring an external auditor to certify compliance with industry standards.
   • CPurchasing cyber insurance to cover potential financial losses from a breach.
   • DDeploying the latest firewall and antivirus software on all endpoints.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does an effective cybersecurity stance support overall risk management?

   • ABy eliminating all risks to the organization.
   • BBy transferring all risks to insurance providers.
   • CBy identifying, assessing, and mitigating cybersecurity risks to an acceptable level.
   • DBy focusing only on compliance with industry standards.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A hospital wants to ensure that its patient portal remains available to patients and that medical records are not altered by unauthorized parties. The hospital implements strong access controls, encryption, and regular integrity checks. Which reason for an effective cybersecurity stance does this best support?

   • AComplying with a specific state law that mandates these exact controls.
   • BTransferring cybersecurity risk to patients through the portal's terms of service.
   • CProtecting the confidentiality and integrity of patient data.
   • DEnsuring the availability of the patient portal at all times.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A software company experiences a security incident where a developer's credentials are stolen, leading to a malicious code injection into a product update. The company must recall the update, issue a patch, and loses several enterprise customers. Which consequence of inadequate cybersecurity is most directly illustrated?

   • AFinancial and reputational damage due to loss of customer trust.
   • BNo significant consequence, because the company was able to issue a patch.
   • CLegal liability only, because the company failed to protect its code.
   • DOperational disruption only, because the company had to recall the update.
   Reveal Solution Discussion Select an answer first