Define the Reasons Why an Effective Cybersecurity Stance Is Important. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A regional bank processes card payments and stores customer PII. After a breach that exposed 40,000 records, the bank faces a regulatory fine, a class-action lawsuit, and a 12% drop in customer deposits. Which consequence of inadequate cybersecurity does this scenario most directly illustrate?

   • AReputational damage only, because customer trust is the sole asset affected.
   • BOperational disruption only, because the breach did not stop core banking transactions.
   • CFinancial, reputational, and legal consequences resulting from a weak security posture.
   • DCompliance failure only, because the fine is the only measurable outcome.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A financial services firm is adopting the NIST CSF. The board asks the CISO to explain how the framework helps manage cyber risk. Which explanation is most accurate?

   • AThe NIST CSF is a compliance standard that, if met, guarantees no cyber incidents will occur.
   • BThe NIST CSF provides a prescriptive set of security tools that must be purchased and deployed.
   • CThe NIST CSF helps the firm identify, assess, and prioritize cybersecurity risks and align investments with business objectives.
   • DThe NIST CSF replaces the need for any other risk management process within the firm.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A city government wants to ensure that its emergency services (police, fire, EMS) remain operational during a cyber incident. The city implements redundant communication systems, offline backups for dispatch records, and a continuity plan. Which reason for an effective cybersecurity stance does this best illustrate?

   • AComplying with federal cybersecurity mandates for local governments.
   • BEnsuring business continuity for critical public services.
   • CReducing the likelihood of a cyberattack targeting the city.
   • DProtecting the confidentiality of citizen data held by the city.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a potential financial consequence of a weak cybersecurity posture?

   • AReduced need for security staff and tools.
   • BLower insurance premiums because the organization is seen as low-risk.
   • CIncreased employee productivity due to reduced security restrictions.
   • DCosts associated with data breach remediation, legal fees, and regulatory fines.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A small e-commerce company experiences a data breach that exposes customer credit card numbers. The company must notify affected customers, pay forensic investigation costs, and faces a decline in sales. Which statement best summarizes the impact of this breach?

   • AThe company incurred only direct financial costs from the forensic investigation.
   • BThe breach had no long-term consequences because the company can recover from the sales decline.
   • CThe company's main loss was the stolen credit card data itself, which is an intangible asset.
   • DThe breach caused financial, operational, and reputational damage that could have been reduced with a stronger cybersecurity stance.
   Reveal Solution Discussion Select an answer first