Explain the Categories and Subcategories of the DETECT Function. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   A security team is setting up a system to collect and review logs from all network devices to identify potential security events. Which DETECT category does this activity map to?

   • AIncident Analysis
   • BContinuous Monitoring
   • CDetection Technology
   • DAdverse Event Analysis
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which statement best describes the role of the DETECT function within the overall NIST Cybersecurity Framework 2.0 lifecycle?

   • AIt is a reactive step that focuses solely on containing an incident after it has been confirmed.
   • BIt provides the foundational governance and risk management strategy for the entire organization.
   • CIt acts as the final step, ensuring all systems are restored to normal operation after an incident.
   • DIt is a proactive step that enables an organization to discover cybersecurity events as they happen, informing subsequent response actions.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following best describes a subcategory of Adverse Event Analysis in the NIST CSF 2.0?

   • AAutomating the detection of cybersecurity events
   • BDetermining the appropriate response to an incident
   • CEnsuring that detection processes are tested and validated
   • DAnalyzing detected events to understand the characteristics of a potential attack
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   An organization is reviewing its security operations and wants to ensure it has processes in place to determine the scope of damage from a potential security breach. Which DETECT category is most relevant to this goal?

   • AContinuous Monitoring
   • BIncident Impact
   • CAdverse Event Analysis
   • DDetection Technology
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a subcategory of Detection Technology in the NIST Cybersecurity Framework 2.0?

   • ACorrelating event data from multiple sources
   • BEstimating the impact of an incident
   • CDefining the roles of detection personnel
   • DLogging events to support detection and analysis
   Reveal Solution Discussion Select an answer first