A multinational company is recovering from a data breach that affected customers in multiple countries. The recovery team must coordinate with legal, PR, and regulators. The team is overwhelmed with requests for information. What is the best approach to manage this?

Assign a single person to handle all external communications.

Limit communication to only the most critical stakeholders until recovery is complete.

Establish a central coordination point that triages and routes information requests to the appropriate teams.

Let each team respond directly to requests to speed up communication.

For a non-critical system that can tolerate several hours of downtime, which recovery strategy is most cost-effective?

Implement a hot standby with automatic failover

Use a manual rebuild from documentation

Maintain a real-time replication site

What is the purpose of validating a recovered system before returning it to production?

To test the backup process for future incidents

To confirm the system is functional and secure

To document the recovery process for auditors

To ensure the system is running the latest operating system

Which activity is part of validating a recovered system?

Deleting old backups to free up storage

Informing users that the system is back online

Updating the incident response plan

Running security scans to check for vulnerabilities

Dell NIST Cybersecurity Framework v2.0

Domain 7Objective 4

Elaborate the Tools and Techniques That Can Be Employed for Incident Recovery Plan Execution. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Part of the NIST Framework: RECOVER Function domain, which accounts for 7% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

35questions here

7free pages

10concepts

7%of the exam

Questions 16–20

16expert · hard
A multinational company is recovering from a data breach that affected customers in multiple countries. The recovery team must coordinate with legal, PR, and regulators. The team is overwhelmed with requests for information. What is the best approach to manage this?
Select an answer first
17foundation · easy
For a non-critical system that can tolerate several hours of downtime, which recovery strategy is most cost-effective?
Select an answer first
18foundation · easy
What is the purpose of validating a recovered system before returning it to production?
Select an answer first
19foundation · easy
During recovery, which stakeholder should be informed about the expected downtime and recovery timeline?
Select an answer first
20foundation · easy
Which activity is part of validating a recovered system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.