Identify the Six NIST CSF 2.0 Core Functions. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A large enterprise is implementing NIST CSF 2.0 and has a mature security program. The CISO wants to ensure that the Core Functions are not treated as isolated silos but as an integrated cycle. Which approach best demonstrates this integration?

   • AAssign each function to a different team and measure their performance independently.
   • BImplement all functions simultaneously without any dependencies.
   • CFocus only on the functions that are most critical to the business.
   • DUse the output of one function as input to another, such as using threat intelligence from Detect to improve Protect controls.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A small business is adopting NIST CSF 2.0 and wants to understand how the Core Functions relate to each other. The owner asks, 'If we don't know what assets we have, how can we protect them?' This question highlights the importance of which function as a prerequisite for the Protect function?

   • ADetect
   • BRecover
   • CGovern
   • DIdentify
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A regional bank has just completed a risk assessment that identified a new critical vulnerability in its internet-facing payment application. The CISO wants to ensure that the organization's cybersecurity activities are aligned with the NIST CSF 2.0 to address this finding. Which Core Function should the bank primarily rely on to implement the necessary safeguards?

   • AProtect
   • BDetect
   • CRespond
   • DRecover
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In the NIST CSF 2.0, which function logically comes first in the sequence of the Core Functions?

   • AIdentify
   • BProtect
   • CGovern
   • DDetect
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A cybersecurity analyst is documenting the organization's incident response process. The analyst notes that after a security incident is contained and eradicated, the organization must restore affected systems to normal operation and then review the incident to improve future response. According to the NIST CSF 2.0 Core Functions, which function should the analyst document as the final step in this process?

   • ARecover
   • BDetect
   • CRespond
   • DGovern
   Reveal Solution Discussion Select an answer first