Explain IDENTITY Function with Its Categories and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which subcategory of Asset Management (ID.AM) in the NIST Cybersecurity Framework 2.0 addresses the assignment of roles and responsibilities for asset management?

   • AID.AM-05: Resources are prioritized based on their classification, criticality, and business value
   • BID.AM-08: Organizational communication and data flows are mapped
   • CID.AM-07: Inventories of software platforms and applications are maintained
   • DID.AM-06: Cybersecurity roles and responsibilities for the entire workforce are established
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An online retailer relies on a third-party cloud provider for its e-commerce platform and a separate logistics vendor for order fulfillment. After a recent breach at the logistics vendor, the retailer's CISO wants to formally document the security requirements that both vendors must meet, including incident notification timelines and data protection standards. Which IDENTIFY category and subcategory best address this need?

   • AGovernance (ID.GV) — establishing internal cybersecurity policy
   • BRisk Assessment (ID.RA) — identifying vulnerabilities in the supply chain
   • CSupply Chain Risk Management (ID.SC) — establishing risk requirements for suppliers
   • DAsset Management (ID.AM) — inventorying third-party services
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the Improvement (ID.IM) category of the NIST Cybersecurity Framework 2.0, which subcategory focuses on reviewing the organization's risk management processes?

   • AID.IM-01: Improvements are identified from evaluations
   • BID.IM-02: Organizational risk management processes are reviewed and updated
   • CID.IM-03: Risk responses are identified and prioritized
   • DID.IM-04: Dependencies and priorities of organizational activities are considered
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A financial institution is reviewing its supply chain risk management program. It has identified that its primary cloud provider has a significant vulnerability that could expose customer data. The institution's risk assessment shows that the likelihood of exploitation is low, but the impact would be catastrophic. The institution also has a secondary cloud provider that is less critical but has a higher likelihood of a minor incident. The CISO must decide where to focus supply chain risk management efforts. Which approach aligns with the IDENTIFY function?

   • AFocus on the secondary provider because the likelihood is higher, making it more probable.
   • BDefer action on both providers until more information is available.
   • CSplit efforts equally between both providers to balance the risk.
   • DFocus on the primary provider because the impact is catastrophic, despite the low likelihood.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A university's IT security team conducts an annual review of its risk management process. They compare the previous year's risk assessment results with actual security incidents, identify gaps in their threat modeling, and update their risk register accordingly. They also revise their vulnerability scanning schedule based on lessons learned. Which IDENTIFY category is the team primarily exercising?

   • AImprovement (ID.IM)
   • BRisk Management Strategy (ID.RM)
   • CAsset Management (ID.AM)
   • DGovernance (ID.GV)
   Reveal Solution Discussion Select an answer first