A global logistics company relies on a central order management system. The system must be available 24/7, and any downtime results in significant revenue loss. The company is designing a resilient architecture. They have a primary data center and a secondary data center in a different geographic region. The security team must ensure that data is replicated between the sites and that failover is seamless. Which approach best aligns with the Technology Infrastructure Resilience (PR.IR) category?

Use a single data center with a robust backup strategy and a manual recovery plan.

Implement active-active replication between the two data centers with automated load balancing and failover.

Deploy additional security patches to the servers in the primary data center.

Encrypt all data in transit between the two data centers.

Which subcategory of PR.PS focuses on managing vulnerabilities in organizational systems and software?

PR.PS-05: Vulnerabilities in organizational systems and software are managed

PR.PS-01: Configuration management practices are established and applied

PR.PS-03: Hardware is maintained, replaced, and removed based on risk

PR.PS-02: Software is maintained, replaced, and removed based on risk

What is the primary focus of the Technology Infrastructure Resilience (PR.IR) category in the NIST Cybersecurity Framework 2.0?

Providing cybersecurity awareness training

Protecting data confidentiality, integrity, and availability

Managing identities and access control

Designing and implementing resilient technology infrastructure to withstand disruptions

What is the focus of the Identity Management, Authentication, and Access Control (PR.AA) category in the NIST Cybersecurity Framework 2.0?

Managing identities, credentials, and access privileges to protect assets

Protecting the confidentiality, integrity, and availability of data

Providing cybersecurity awareness and training to personnel

Securing hardware, software, and platforms against threats

Which subcategory of PR.IR focuses on protecting the availability of systems and networks?

PR.IR-03: The organization's technology infrastructure is protected from unauthorized access

PR.IR-02: The organization's systems are protected from unauthorized access

PR.IR-04: The organization's networks and systems are protected from denial-of-service attacks

PR.IR-01: The organization's network is protected from unauthorized access

Dell NIST Cybersecurity Framework v2.0

Domain 4Objective 1

Explain the PROTECT Function, Its Categories, and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Part of the NIST Framework: PROTECT Function domain, which accounts for 12% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

30questions here

6free pages

6concepts

12%of the exam

Questions 1–5

1expert · hard
A global logistics company relies on a central order management system. The system must be available 24/7, and any downtime results in significant revenue loss. The company is designing a resilient architecture. They have a primary data center and a secondary data center in a different geographic region. The security team must ensure that data is replicated between the sites and that failover is seamless. Which approach best aligns with the Technology Infrastructure Resilience (PR.IR) category?
Select an answer first
2foundation · easy
Which subcategory of PR.PS focuses on managing vulnerabilities in organizational systems and software?
Select an answer first
3foundation · easy
What is the primary focus of the Technology Infrastructure Resilience (PR.IR) category in the NIST Cybersecurity Framework 2.0?
Select an answer first
4foundation · easy
What is the focus of the Identity Management, Authentication, and Access Control (PR.AA) category in the NIST Cybersecurity Framework 2.0?
Select an answer first
5foundation · easy
Which subcategory of PR.IR focuses on protecting the availability of systems and networks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.