A small business is starting its cybersecurity program and has decided to use NIST CSF 2.0. The owner has heard that the IDENTIFY function is the first step. The owner asks the consultant, 'Why is the IDENTIFY function so important for our risk management?' Which response best reflects the purpose of the IDENTIFY function?

It is the only function that directly protects the organization from cyberattacks.

It is a one-time activity that must be completed before any other function can begin.

It is only necessary for organizations that handle sensitive data.

It provides the foundational understanding of the organization's assets, risks, and governance needed to manage cybersecurity risk effectively.

A mid-sized bank is defining its cybersecurity priorities. The board has stated that the bank can tolerate a maximum of 4 hours of downtime for its core banking system per year, but is willing to accept higher risk for its internal HR portal. The CISO is now tasked with translating these statements into a formal document that guides which risks to mitigate first. Which IDENTIFY category and subcategory best describes this work?

Risk Management Strategy (ID.RM) — establishing risk appetite and tolerance

Asset Management (ID.AM) — prioritizing critical assets

Risk Assessment (ID.RA) — identifying threats to the banking system

Governance (ID.GV) — establishing cybersecurity policy

In the Asset Management (ID.AM) category of the NIST Cybersecurity Framework 2.0, which subcategory focuses on identifying and managing data assets?

ID.AM-03: Organizational communication and data flows are mapped

ID.AM-02: Inventories of software platforms and applications

ID.AM-01: Inventories of physical devices and systems

ID.AM-04: Inventories of data and corresponding metadata are maintained

Dell NIST Cybersecurity Framework v2.0

Domain 3Objective 1

Explain IDENTITY Function with Its Categories and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 7)

Part of the NIST Framework: IDENTITY Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

33questions here

7free pages

10concepts

18%of the exam

Questions 31–33

31application · medium
A small business is starting its cybersecurity program and has decided to use NIST CSF 2.0. The owner has heard that the IDENTIFY function is the first step. The owner asks the consultant, 'Why is the IDENTIFY function so important for our risk management?' Which response best reflects the purpose of the IDENTIFY function?
Select an answer first
32application · medium
A mid-sized bank is defining its cybersecurity priorities. The board has stated that the bank can tolerate a maximum of 4 hours of downtime for its core banking system per year, but is willing to accept higher risk for its internal HR portal. The CISO is now tasked with translating these statements into a formal document that guides which risks to mitigate first. Which IDENTIFY category and subcategory best describes this work?
Select an answer first
33foundation · easy
In the Asset Management (ID.AM) category of the NIST Cybersecurity Framework 2.0, which subcategory focuses on identifying and managing data assets?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.

Explain IDENTITY Function with Its Categories and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 7)

Questions 31–33

In the Asset Management (ID.AM) category of the NIST Cybersecurity Framework 2.0, which subcategory focuses on identifying and managing data assets?

Keep studying — NIST Framework: IDENTITY Function