Explain the PROTECT Function, Its Categories, and Subcategories. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An e-commerce company wants to ensure its website remains available to customers even if one of its primary data centers experiences a regional outage. The architecture team is designing the infrastructure to withstand this disruption. Which design principle is most aligned with the Technology Infrastructure Resilience (PR.IR) category?

   • APurchase more powerful servers for the primary data center to handle higher traffic loads.
   • BDeploy the application and data across multiple availability zones in the same region.
   • CImplement a disaster recovery plan that includes failover to a secondary region.
   • DIncrease the frequency of data backups to every hour.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A multinational corporation is updating its security strategy to align with the NIST Cybersecurity Framework 2.0. The CISO wants to ensure that the PROTECT function is implemented effectively. The company has a diverse workforce, including remote employees, and handles sensitive customer data. The security team has identified that the current access control system is fragmented, and data is not consistently encrypted. They are planning a unified identity management solution and a data classification policy. Which approach best demonstrates a holistic implementation of the PROTECT function?

   • ADevelop a comprehensive program that includes unified identity management with MFA, a data classification and encryption policy, and ongoing security awareness training.
   • BDeploy a single sign-on (SSO) solution for all applications and enforce MFA for all users.
   • CImplement a data loss prevention (DLP) solution and encrypt all sensitive data at rest and in transit.
   • DFocus on deploying advanced endpoint protection software on all company devices.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary focus of the Data Security (PR.DS) category in the NIST Cybersecurity Framework 2.0?

   • AManaging identities and access control
   • BProviding cybersecurity awareness training
   • CProtecting the confidentiality, integrity, and availability of data
   • DSecuring hardware and software platforms
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which subcategory of PR.AA focuses on ensuring that users are who they claim to be before granting access?

   • APR.AA-02: Identities are proofed and bound to credentials based on the context of transactions
   • BPR.AA-05: Access permissions are managed and incorporated into the organization's identity management process
   • CPR.AA-01: Identities and credentials are managed for authorized users, services, and hardware
   • DPR.AA-03: Users, services, and hardware are authenticated based on risk of transactions
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying a new web application on a virtual machine in its data center. The security team must ensure the underlying operating system and application are hardened against known vulnerabilities before the application is exposed to the internet. Which set of actions best aligns with the Platform Security (PR.PS) category?

   • AInstall an endpoint detection and response (EDR) agent and enable real-time monitoring.
   • BDeploy the application on a separate network segment and rely on network segmentation for protection.
   • CCreate a golden image of the OS and use it for all future deployments.
   • DApply the latest security patches to the OS and application, and configure the host firewall to allow only necessary ports.
   Reveal Solution Discussion Select an answer first