Learn About the Processes and Controls Involved in Data and Platform Security. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which data security control is specifically designed to detect and block attempts to copy sensitive data to unauthorized external devices or cloud services?

   • ARole-based access control (RBAC)
   • BData loss prevention (DLP)
   • CEncryption
   • DHashing
   Reveal Solution Discussion Select an answer first
2. 7application · medium · select all that apply

   A company is implementing platform security controls to protect its servers. Which of the following are considered effective platform security controls under the NIST CSF PROTECT function? (Select all that apply.)

   • AImplementing data classification.
   • BApplying security patches on a regular schedule.
   • CDisabling unnecessary services and ports.
   • DEnforcing a hardened configuration baseline.
   • EEncrypting data at rest.
   Check answers Discussion Select an answer first
4. 8expert · hard

   An e-commerce company experiences a security incident due to an unpatched vulnerability in a web server. The security team wants to implement a patch management process that balances the need for timely patching with the risk of breaking the application. Which approach is most effective?

   • AUse an automated patch tool that applies patches only to non-critical servers, and leave critical servers unpatched.
   • BEstablish a patch management policy that requires testing in a staging environment before production deployment, with a defined timeline for critical patches.
   • CDefer all patches until the next scheduled maintenance window, regardless of severity.
   • DApply all patches immediately to production servers to minimize the window of exposure.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company is deploying a new application in a cloud environment. The security team wants to ensure that the platform is secure from the start, but the development team wants to move quickly. Which approach best balances security and agility?

   • ADeploy the application first, and then conduct a security review after it is live.
   • BUse a separate security team to deploy all resources, and have the development team only write code.
   • CRequire the development team to manually configure security settings for each deployment.
   • DUse infrastructure as code (IaC) to define a secure baseline, and integrate security checks into the CI/CD pipeline.
   Reveal Solution Discussion Select an answer first
6. 10application · medium · select all that apply

   A company is implementing data security controls to protect customer data. Which of the following are considered effective data security controls under the NIST CSF PROTECT function? (Select all that apply.)

   • AUsing a data loss prevention tool to monitor and block unauthorized data transfers.
   • BEncrypting data at rest and in transit.
   • CApplying system hardening to servers.
   • DImplementing role-based access control to limit data access.
   • EDeploying a web application firewall to protect the application layer.
   Check answers Discussion Select an answer first