Learn About the Processes and Controls Involved in Data and Platform Security. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which platform security control involves applying updates to operating systems and applications to address known vulnerabilities?

   • APatch management
   • BConfiguration management
   • CVulnerability scanning
   • DSystem hardening
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A large organization has a mix of legacy and modern applications running on different platforms. The security team wants to implement a consistent hardening standard across all platforms, but the legacy applications have specific requirements that prevent some hardening measures. Which approach is most appropriate?

   • ACreate a baseline hardening standard, and document and approve exceptions for legacy applications that cannot meet the standard.
   • BHarden only the modern applications, and leave legacy applications as they are.
   • CMigrate all legacy applications to modern platforms immediately, regardless of cost and effort.
   • DApply the same hardening standard to all platforms, and disable any legacy application that does not comply.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A multinational corporation must comply with data residency regulations that require personal data of EU citizens to remain within the EU. The company uses a global cloud provider. The security team is designing data protection controls. Which approach best meets the compliance requirement while maintaining security?

   • AUse a data loss prevention tool to block all data transfers out of the EU, and store data in any region.
   • BDeploy a private cloud on-premises in the EU, and use a VPN to connect to the global cloud provider.
   • CStore EU personal data in a cloud region located in the EU, encrypt it at rest, and restrict access to the data using role-based access control.
   • DEncrypt all data with a customer-managed key and store the key in a separate region outside the EU.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A software company hosts a multi-tier application in a cloud environment. The security team wants to ensure that the underlying platform is hardened and that vulnerabilities are addressed promptly. Which practice is most aligned with platform security controls under the NIST CSF PROTECT function?

   • AEstablish a vulnerability management program that includes regular scanning, prioritization, and patching of all platform components.
   • BEnable automatic patching for the operating system, and disable all unused ports on the servers.
   • CDeploy a firewall and an intrusion detection system, and monitor logs for suspicious activity.
   • DUse container images from the public registry, and update them only when a new version is released.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which control is primarily used to protect data confidentiality by transforming readable data into an unreadable format for unauthorized users?

   • AAccess control lists (ACLs)
   • BData masking
   • CData encryption
   • DData loss prevention (DLP)
   Reveal Solution Discussion Select an answer first