A new employee joins the marketing team and needs access to the company's marketing tools and shared drives. According to least privilege, what should the administrator do?

Grant only the specific tools and drives required for the marketing role

Grant access to all systems to avoid delays

Grant temporary admin rights to the employee

Grant access to the finance department's systems as well

A company wants to implement a passwordless authentication method for its employees. Which option is a passwordless method?

A one-time passcode sent via SMS

A smart card with a certificate

A password manager that stores complex passwords

A security team wants to monitor all actions performed by administrators with elevated privileges. What is the most effective way to achieve this?

Use a shared admin account to reduce the number of accounts to monitor

Disable logging to improve performance

Enable detailed logging and auditing for privileged accounts

Rely on periodic manual reviews of admin activity

A company is required by regulation to demonstrate that user access is appropriate. What should the company implement to meet this requirement?

Manual reviews performed once a year

Reviews only when a security incident occurs

No reviews if the company trusts its employees

Automated access reviews with audit trails

A company wants to ensure that user access rights are aligned with current job responsibilities. Which process should be implemented?

Only review access when a security incident occurs

Grant all employees the same default access level

Perform quarterly access reviews

Rely on managers to report changes in responsibilities

Dell NIST Cybersecurity Framework v2.0

Domain 4Objective 2

Learn About the Processes and Controls Involved in Identity Management, Authentication, and Access Control. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 5)

Part of the NIST Framework: PROTECT Function domain, which accounts for 12% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

29questions here

6free pages

7concepts

12%of the exam

Questions 21–25

21application · easy
A new employee joins the marketing team and needs access to the company's marketing tools and shared drives. According to least privilege, what should the administrator do?
Select an answer first
22application · easy
A company wants to implement a passwordless authentication method for its employees. Which option is a passwordless method?
Select an answer first
23expert · medium
A security team wants to monitor all actions performed by administrators with elevated privileges. What is the most effective way to achieve this?
Select an answer first
24application · medium
A company is required by regulation to demonstrate that user access is appropriate. What should the company implement to meet this requirement?
Select an answer first
25application · medium
A company wants to ensure that user access rights are aligned with current job responsibilities. Which process should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.