Explain the PROTECT Function, Its Categories, and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which subcategory of PR.DS focuses on protecting data while it is stored?

   • APR.DS-02: The confidentiality, integrity, and availability of data-in-transit are protected
   • BPR.DS-01: The confidentiality, integrity, and availability of data-at-rest are protected
   • CPR.DS-03: The confidentiality, integrity, and availability of data-in-use are protected
   • DPR.DS-04: Adequate capacity to maintain availability is ensured
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm has experienced multiple successful phishing attacks despite having technical email filters in place. The security manager wants to reduce the likelihood of successful social engineering by addressing the human factor. Which action aligns with the PROTECT function's Awareness and Training category?

   • AConduct regular, role-based security awareness training that includes simulated phishing exercises for all employees.
   • BIncrease the spam filter's sensitivity to block more incoming emails.
   • CDisable email for all employees to eliminate the phishing vector.
   • DProvide a one-time security awareness video to all new hires during onboarding.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the NIST Cybersecurity Framework 2.0, what is the primary purpose of the PROTECT function?

   • ATo provide safeguards to limit or contain the impact of potential cybersecurity events
   • BTo manage and reduce cybersecurity risk to systems, assets, and data
   • CTo outline the steps for detecting cybersecurity events and anomalies
   • DTo identify opportunities for improving cybersecurity posture and resilience
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which NIST Cybersecurity Framework 2.0 function is responsible for the safeguards that protect systems and assets, such as access control and data security?

   • ARESPOND (RS)
   • BGOVERN (GV)
   • CRECOVER (RC)
   • DPROTECT (PR)
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the main purpose of the Awareness and Training (PR.AT) category in the NIST Cybersecurity Framework 2.0?

   • ATo ensure personnel are provided with cybersecurity awareness and training
   • BTo manage identities and access privileges for personnel
   • CTo protect data through encryption and integrity checks
   • DTo secure hardware and software platforms
   Reveal Solution Discussion Select an answer first