Learn About the Processes and Controls Involved in Data and Platform Security. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital uses a mix of Windows and Linux servers to run its patient management system. The security team wants to ensure that all servers are patched consistently and that configuration drift is minimized. Which approach is most effective?

   • APatch each server manually on a quarterly basis, and document any configuration changes in a spreadsheet.
   • BDeploy a security information and event management (SIEM) tool to monitor for vulnerabilities, and patch only when an alert is triggered.
   • CUse a centralized patch management tool that supports both Windows and Linux, and enforce a configuration baseline using a configuration management tool.
   • DEnable automatic updates on each server, and rely on the vendor's default settings for configuration.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company is implementing a data loss prevention (DLP) strategy to protect sensitive data. The security team must balance the need to prevent data exfiltration with the need to allow legitimate business use of the data. Which approach is most effective?

   • AAllow all data transfers, but require users to acknowledge a warning before sending sensitive data.
   • BImplement DLP policies that classify data by sensitivity, and apply rules that block only high-risk actions, while allowing lower-risk actions with user notification.
   • CBlock all data transfers out of the organization, regardless of the data type or destination.
   • DMonitor all data transfers and alert on suspicious activity, but do not block any transfers.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company runs industrial control systems (ICS) on dedicated servers. The security team wants to harden these systems without disrupting production. Which approach is most appropriate for platform security?

   • AApply all available patches immediately to all servers, regardless of impact.
   • BCreate a baseline configuration that disables unnecessary services, and test patches in a staging environment before applying them to production.
   • CUse a configuration management tool to enforce a hardened baseline, but skip patching to avoid downtime.
   • DDisable all remote access and rely on physical security for the servers.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A government agency stores sensitive citizen data in a data lake. The agency must ensure that data is protected according to classification levels and that access is granted based on job role. Which combination of controls best meets these requirements?

   • AApply network segmentation to isolate the data lake, and use a shared access key for all applications.
   • BUse a data loss prevention tool to block unauthorized downloads, and store all data in a single encrypted bucket.
   • CEncrypt the data lake, and grant all analysts full access to simplify data sharing.
   • DImplement data classification tags, apply encryption at rest, and use attribute-based access control (ABAC) to grant permissions based on data sensitivity and user attributes.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A law firm stores client documents in a cloud file-sharing service. The firm wants to prevent unauthorized sharing of sensitive documents and ensure that only partners can access them. Which control is most effective for this scenario?

   • AEncrypt all documents with a customer-managed key, and share the key with all employees.
   • BUse a strong password policy for all users, and enable two-factor authentication.
   • CDisable external sharing for the entire service, and rely on user training to prevent leaks.
   • DEnable data loss prevention (DLP) policies that block sharing of documents tagged as confidential, and configure access controls so only partners have permission.
   Reveal Solution Discussion Select an answer first