You can see it againUnder pressure people bring back shapes and positions long after the wording has gone.
Picture superiority · Shepard 1967, Standing 1973
DELL TECHNOLOGIESDell NIST Cybersecurity Framework v2.0
The Dell NIST Cybersecurity Framework 2.0 certification validates your ability to understand, implement, and apply the NIST CSF 2.0 to strengthen an organization's cybersecurity posture and resilience. Designed for cybersecurity professionals, IT managers, and risk managers, this credential proves you can integrate the framework's core functions, manage cyber risk, and communicate security priorities across the enterprise. Earning it demonstrates practical, framework-based skills that are essential for modern security operations.
Exam formatProctored exam
DeliveryPearson VUE
Free questions1243
Content last reviewed 30 July 2026 · Up to date
The certification
What NIST-CYBERSECURITY-FRAMEWORK-2 proves, and what it asks of you
What this certification covers, who it is written for, and what the exam itself looks like on the day.
10domains
48objectives
269concepts
What it is
What this certification is
What it validates, who it is written for, and the experience it assumes.
About this certification
The Dell NIST Cybersecurity Framework 2.0 certification validates the knowledge and skills required to understand, implement, and utilize the NIST Cybersecurity Framework (CSF) 2.0. Candidates are assessed on their ability to apply the CSF 2.0 Functions, implement cybersecurity practices, manage cybersecurity risks, and integrate the framework into organizational processes.
By passing this exam, candidates demonstrate their competency in utilizing the CSF 2.0 to improve an organization's cybersecurity posture and resilience. The certification is suitable for cybersecurity professionals, IT managers, risk managers, and anyone responsible for implementing or overseeing cybersecurity programs.
Who it’s for
This certification is designed for cybersecurity professionals, IT managers, risk managers, and anyone responsible for implementing or overseeing cybersecurity programs. It is also well-suited for DevOps Engineers and Technical Consultants who need to apply the NIST CSF 2.0 in their daily work. Candidates should be comfortable with core cybersecurity concepts and organizational risk management, and are expected to translate framework guidance into practical security controls and processes.
Recommended experience
Dell recommends completing the associated training and reviewing the exam topics before attempting the certification. Familiarity with the NIST Cybersecurity Framework and its core functions; Understanding of enterprise risk management principles; Experience with cybersecurity practices and controls; Knowledge of incident response, recovery, and supply chain risk management
The syllabus
What you’ll learn
Every domain and objective Dell Technologies measures, with the weight they carry on the exam.
The official Dell Technologies exam outline · checked 30 July 2026 · See the source
NIST CSF 2.0 Introduction
- Identify the increasing data security threats to IT systems and data.
- Define the reasons why an effective cybersecurity stance is important.
- Explain the purpose and the key changes of the NIST CSF 2.0 framework.
- Describe the NIST CSF 2.0 components.
- Identify the six NIST CSF 2.0 Core Functions.
NIST Framework: GOVERN Function
- Describe GOVERN Function and its relationship with the Enterprise Risk Management (ERM).
- Explain GOVERN Function categories and subcategories.
- Define the organizational context and risk management strategy.
- Establish clear policies and procedures to guide cybersecurity activities.
- Define clear roles and responsibilities for cybersecurity personnel.
- Identify and manage cybersecurity risks associated with suppliers and third-party vendors.
NIST Framework: IDENTITY Function
- Explain IDENTITY Function with its categories and subcategories.
- Identify and inventory all assets and categorize them based on their criticality and sensitivity.
- Assign ownership and responsibility for each asset.
- List the tools and techniques used in asset management.
- Describe risk assessment.
- Describe the controls and techniques in the Incident Response Life Cycle, Contingency Plan, and Business Continuity Plan.
NIST Framework: PROTECT Function
- Explain the PROTECT Function, its categories, and subcategories.
- Learn about the processes and controls involved in identity management, authentication, and access control.
- Understand the need for awareness and training.
- Learn about the processes and controls involved in data and platform security.
- Understand the processes and controls involved in technology infrastructure resilience.
NIST Framework: DETECT Function
- Explain the categories and subcategories of the DETECT Function.
- Describe the significance of continuous monitoring and associated security controls in the DETECT Function.
- Describe the significance of adverse event analysis and associated security controls in DETECT Function.
- Elaborate the tools and techniques that can be employed for achieving continuous monitoring and adverse event analysis.
NIST Framework: RESPOND Function
- Understand the basic concepts and categories of the RESPOND Function.
- Learn about the processes involved in managing incidents.
- Gain knowledge on analyzing incidents with a focus on controls.
- Comprehend the reporting and communication aspects of incident response.
- Understand the strategies and techniques to minimize the impact of an incident.
NIST Framework: RECOVER Function
- Explain the categories and subcategories of the RECOVER Function.
- Analyze the significance of incident recovery plan execution and associated security controls in the RECOVER Function.
- Explain the significance of incident recovery communication and associated security controls in the RECOVER Function.
- Elaborate the tools and techniques that can be employed for incident recovery plan execution.
Analyze NIST CSF Profiles
- Understand the concept of NIST CSF Organizational Profiles.
- Explore different Organizational Profiles.
- Discover how to develop and apply Organizational Profiles.
- Understand the application of NIST CSF Profiles in practical scenarios.
Applying NIST CSF Tiers
- Grasp core concepts and structure of Cybersecurity Framework (CSF) tiers.
- Choose appropriate tiers for risk governance and management.
- Apply the NIST CSF tiers in practical scenarios.
Assess Cybersecurity Risk Communication and Integration
- Explain cybersecurity risks and their impact on organizations.
- Utilize effective communication strategies to convey cybersecurity risks.
- Integrate cybersecurity risk management into broader enterprise risk management programs.
- Explain the importance of Supply Chain Risk Management (SCRM) in cybersecurity.
- Identify and manage the risks associated with emerging technologies, such as AI.
- Describe AI risk management frameworks, tools, and techniques.
On the day
The exam itself
Everything Dell Technologies publishes about sitting it, and nothing we inferred.
Prerequisites
No mandatory prerequisites — this certification has no required predecessor exam or credential.
Exam codeNIST-CYBERSECURITY-FRAMEWORK-2
CertificationDell NIST Cybersecurity Framework v2.0
Exam formatProctored exam
DeliveryPearson VUE
LanguagesEnglish, French
After you pass
Where this credential goes next
The path Dell Technologies lays out, how the credential is kept, and where to book.
Step-by-step path to Dell NIST Cybersecurity Framework v2.0
Credential earnedDell NIST Cybersecurity Framework v2.0 Certification Lifecycle status
This certification is currently active and available. Dell Technologies maintains this certification to validate current skills and industry relevance.
Exam status: ActiveMaintained by Dell Technologies
Exam registration
Register for the exam through Pearson VUE, Dell Technologies’s authorized testing partner.
Schedule your examVisit the official Dell Technologies certification page for exam policies and requirements.
View the official pageYour coach
And when you are serious, your coach Pip takes over
Your coach in the app reads what you have answered with the book closed and tells you one thing to do tonight. It will not count an answer you gave with the page open, and it will tell you when you are not ready.
See how the coach worksBefore you book
Questions people ask
Is the Dell NIST Cybersecurity Framework 2.0 exam a proctored exam?
Yes. Skills certification exams like D-CSF-SC-01 are proctored exams administered through Pearson VUE testing centers and OnVUE online proctoring.
What is the target audience for this certification?
The certification is suitable for cybersecurity professionals, IT managers, risk managers, and anyone responsible for implementing or overseeing cybersecurity programs. The target audience also includes DevOps Engineers and Technical Consultants.
Does this exam have a hands-on or lab-based component?
The official exam description does not mention a hands-on or lab-based component. The exam focuses on assessing knowledge and skills related to the NIST CSF 2.0 framework.
What job roles does the Dell NIST Cybersecurity Framework v2.0 credential map to?
The credential maps to roles such as cybersecurity professionals, IT managers, risk managers, DevOps Engineers, and Technical Consultants who are responsible for implementing or overseeing cybersecurity programs.
Are practice tests available for this exam?
Dell offers practice tests that are unproctored web-based exams. They are available to help candidates prepare for the certification exam.
How do I schedule the D-CSF-SC-01 exam?
You can schedule the exam through Pearson VUE testing centers or via OnVUE online proctoring. The process involves requesting a digital exam voucher and then scheduling the exam using the voucher code.
Information freshness · Content last reviewed on 2026-07-30 Up to date
Practice free questions 1243 questions, free, no account needed.
The curriculum
The whole exam, mapped and written
Every domain, every objective, and every concept Dell Technologies measures — each one written out.
10domains
48objectives
269concepts
269free pages
The domains, and what sits inside them
Every objective below is a page you can open and practise now, without an account.
The official Dell Technologies exam outline · checked 30 July 2026 · See the source
1NIST CSF 2.0 Introduction111 questions
Identify the increasing data security threats to IT systems and data.1 concepts · 4 pagesOpen →Define the reasons why an effective cybersecurity stance is important.3 concepts · 5 pagesOpen →Explain the purpose and the key changes of the NIST CSF 2.0 framework.5 concepts · 5 pagesOpen →Describe the NIST CSF 2.0 components.5 concepts · 5 pagesOpen →Identify the six NIST CSF 2.0 Core Functions.4 concepts · 5 pagesOpen →
2NIST Framework: GOVERN Function161 questions
Describe GOVERN Function and its relationship with the Enterprise Risk Management (ERM).6 concepts · 6 pagesOpen →Explain GOVERN Function categories and subcategories.9 concepts · 7 pagesOpen →Define the organizational context and risk management strategy.6 concepts · 6 pagesOpen →Establish clear policies and procedures to guide cybersecurity activities.4 concepts · 5 pagesOpen →Define clear roles and responsibilities for cybersecurity personnel.5 concepts · 5 pagesOpen →Identify and manage cybersecurity risks associated with suppliers and third-party vendors.5 concepts · 6 pagesOpen →
3NIST Framework: IDENTITY Function164 questions
Explain IDENTITY Function with its categories and subcategories.10 concepts · 7 pagesOpen →Identify and inventory all assets and categorize them based on their criticality and sensitivity.6 concepts · 6 pagesOpen →Assign ownership and responsibility for each asset.6 concepts · 5 pagesOpen →List the tools and techniques used in asset management.7 concepts · 7 pagesOpen →Describe risk assessment.5 concepts · 5 pagesOpen →Describe the controls and techniques in the Incident Response Life Cycle, Contingency Plan, and Business Continuity Plan.5 concepts · 6 pagesOpen →
4NIST Framework: PROTECT Function139 questions
Explain the PROTECT Function, its categories, and subcategories.6 concepts · 6 pagesOpen →Learn about the processes and controls involved in identity management, authentication, and access control.7 concepts · 6 pagesOpen →Understand the need for awareness and training.7 concepts · 7 pagesOpen →Learn about the processes and controls involved in data and platform security.2 concepts · 5 pagesOpen →Understand the processes and controls involved in technology infrastructure resilience.5 concepts · 6 pagesOpen →
5NIST Framework: DETECT Function102 questions
Explain the categories and subcategories of the DETECT Function.9 concepts · 6 pagesOpen →Describe the significance of continuous monitoring and associated security controls in the DETECT Function.4 concepts · 6 pagesOpen →Describe the significance of adverse event analysis and associated security controls in DETECT Function.4 concepts · 6 pagesOpen →Elaborate the tools and techniques that can be employed for achieving continuous monitoring and adverse event analysis.3 concepts · 5 pagesOpen →
6NIST Framework: RESPOND Function142 questions
Understand the basic concepts and categories of the RESPOND Function.7 concepts · 5 pagesOpen →Learn about the processes involved in managing incidents.7 concepts · 6 pagesOpen →Gain knowledge on analyzing incidents with a focus on controls.7 concepts · 7 pagesOpen →Comprehend the reporting and communication aspects of incident response.6 concepts · 6 pagesOpen →Understand the strategies and techniques to minimize the impact of an incident.5 concepts · 6 pagesOpen →
7NIST Framework: RECOVER Function109 questions
Explain the categories and subcategories of the RECOVER Function.4 concepts · 5 pagesOpen →Analyze the significance of incident recovery plan execution and associated security controls in the RECOVER Function.8 concepts · 6 pagesOpen →Explain the significance of incident recovery communication and associated security controls in the RECOVER Function.5 concepts · 5 pagesOpen →Elaborate the tools and techniques that can be employed for incident recovery plan execution.10 concepts · 7 pagesOpen →
8Analyze NIST CSF Profiles110 questions
Understand the concept of NIST CSF Organizational Profiles.8 concepts · 7 pagesOpen →Explore different Organizational Profiles.5 concepts · 5 pagesOpen →Discover how to develop and apply Organizational Profiles.6 concepts · 6 pagesOpen →Understand the application of NIST CSF Profiles in practical scenarios.5 concepts · 6 pagesOpen →
9Applying NIST CSF Tiers58 questions
10Assess Cybersecurity Risk Communication and Integration147 questions
Explain cybersecurity risks and their impact on organizations.5 concepts · 3 pagesOpen →Utilize effective communication strategies to convey cybersecurity risks.6 concepts · 5 pagesOpen →Integrate cybersecurity risk management into broader enterprise risk management programs.5 concepts · 6 pagesOpen →Explain the importance of Supply Chain Risk Management (SCRM) in cybersecurity.7 concepts · 6 pagesOpen →Identify and manage the risks associated with emerging technologies, such as AI.6 concepts · 7 pagesOpen →Describe AI risk management frameworks, tools, and techniques.4 concepts · 5 pagesOpen →
Not a table of contents
Every line on this map already opens
In front of every objective the practice pages are already there, free and without an account. This is one objective, opened.
Identify the increasing data security threats to IT systems and data.4 pagesOpen →
Free in front of it
17 questions on this objective, five to a page. Every range above is a real page, open now, with no account.
Reading the map is not the same as knowing the ground
The curriculum tells you what is on the exam. Proving you know it is a different job — and it is the one the closed-book run does.
Free questions
1243 questions. No account, no card.
The whole bank is open. 5 questions to a page, every answer explained, and a discussion thread on each one.
1243questions
269pages
48objectives
Freealways
Start anywhereIdentify the increasing data security threats to IT systems and data. 17 questions · 4 pages
Browse by domain
Every objective, and every page range, is a link — so you can pick up exactly where you left off.
1NIST CSF 2.0 Introduction111 questions
2NIST Framework: GOVERN Function161 questions
3NIST Framework: IDENTITY Function164 questions
4NIST Framework: PROTECT Function139 questions
5NIST Framework: DETECT Function102 questions
6NIST Framework: RESPOND Function142 questions
7NIST Framework: RECOVER Function109 questions
8Analyze NIST CSF Profiles110 questions
9Applying NIST CSF Tiers58 questions
10Assess Cybersecurity Risk Communication and Integration147 questions
What a practice page gives you
1Five to a page
Short enough to finish, long enough to matter.
2Every answer explained
Not only which one is right — why the others are wrong.
3A discussion on each
Ask, answer, and vote. Every question has its own thread.
A question, and the idea behind it
Every question comes from a concept
These are not trivia. Each one is written against a concept in the book, so when you get one wrong there is somewhere to go and find out why.
The visual book
See it once. Carry it into the exam.
The pages shown here come from our AI-900 book — an example of how each concept is written in plain language and, where the idea needs one, drawn as a full page you can take in at a glance.
269concepts
1243free questions
Why a picture, and not another paragraph
Three reasons, and each one is a real finding rather than a slogan.
You can see it againThe whole idea at onceWhere it starts, what happens in the middle, what comes out, and the mistake to avoid.
Multimedia principle · MayerThe look-alikes sit togetherThe pairs the exam tests are drawn side by side, so the difference is seen, not told.
Dual coding · PaivioWhat one page is made of
You are never asked to read a poster here — only to see how one is built. After that, every other page is legible at a glance.
1A numbered strip on top
The idea as a sequence, followed with a finger before a word is read.
2Panels for the parts
What it is, how the machine learns it, when it is the right tool.
3The trap, framed
The distinction the exam tests, given its own box instead of buried in prose.
4One line at the bottom
The sentence to carry into the exam room.
Open book, on purpose
Answer it with the picture beside you
This is the part that teaches. The illustration and the written explanation stay where they are while you work, so a scenario stops being a memory test and becomes something you can simply look at.
It teaches · it does not count
A smartphone uses AI to unlock when the owner looks at the camera. Which AI capability is being used?
AImage classification
BFacial recognition
COptical character recognition
DObject detection
Look at the five steps. Detect finds a face, align straightens it, encode turns it into numbers, search compares it with a stored face, and decide answers one question: is this the same person? Classification would only say “a face”. Detection would only draw a box. Neither decides whose.
Then the page shuts, and it starts counting
The same questions come back with the book closed — that run is the one that counts. After it, your coach picks one thing for tonight, sized to the time you have, and brings pages back before you lose them.
Testing effect · Roediger & Karpicke 2006 · spacing effect · Cepeda et al. 2006
Official resources
Straight from Dell Technologies
Where the exam is defined, scheduled and scored.
4official links
269concepts mapped
The source
Dell Technologies’s own pages
We link to them rather than repeat them, so nothing here goes stale behind them.
Checked against the source
Every objective on the official Dell Technologies outline already has questions here
We build from the official skills outline, not from a summary of it — 48 objectives, 269 concepts written under them, and free questions against every one. When Dell Technologies changes the outline, this page changes with it.
48objectives on the outline→269concepts written→1243free questions
An official page tells you what will be asked. It cannot tell you what you will get right.
That is the only question worth answering the night before, and no link answers it. You answer it by taking the questions with the book closed, and seeing what comes back.