Describe the Significance of Continuous Monitoring and Associated Security Controls in the DETECT Function. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   In the NIST Cybersecurity Framework 2.0, what is the primary purpose of continuous monitoring within the DETECT function?

   • ATo identify cybersecurity events and anomalies in real time as they occur
   • BTo ensure compliance with all regulatory requirements by generating reports
   • CTo automatically remediate all identified vulnerabilities without human intervention
   • DTo replace the need for periodic risk assessments and audits
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A hospital's security team wants to detect and respond to potential ransomware attacks in real time. They have a SIEM but need to add a control that can identify malicious files on endpoints and automatically initiate a response. Which control should they add?

   • AA vulnerability scanner that runs weekly to identify unpatched systems.
   • BEndpoint detection and response (EDR) that integrates with the SIEM to trigger automated containment actions.
   • CA network-based IDS that monitors traffic for known ransomware signatures.
   • DA firewall rule that blocks all inbound traffic from the internet.
   Reveal Solution Discussion Select an answer first