Explain How Governmental Directives and Regulations Guidance Publications Like NIST CSF Help Influence the Design of Defense Capabilities. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A global e-commerce company processes personal data of EU citizens and must comply with GDPR. The security team is designing a defense capability to ensure that personal data breaches are promptly reported to supervisory authorities. Which NIST CSF core function does this requirement primarily align with?

   • AIdentify
   • BProtect
   • CRespond
   • DDetect
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is using NIST CSF profiles to assess its cybersecurity posture. The current profile shows that the organization has implemented basic network security controls, but the target profile requires advanced threat detection capabilities. Which of the following is the most appropriate action to address this gap?

   • AImplement a SIEM with advanced analytics and threat intelligence
   • BDeploy a next-generation firewall with intrusion prevention
   • CIncrease the frequency of vulnerability scans
   • DConduct a security awareness training program
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which statement accurately describes the structure of the NIST Cybersecurity Framework?

   • AIt is a legal framework that defines penalties for non-compliance
   • BIt consists of a single set of mandatory controls that all organizations must implement identically
   • CIt is a checklist of technical tools that must be deployed in a specific order
   • DIt is organized around five core functions, implementation tiers, and profiles
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which governmental regulation is specifically designed to protect the privacy and security of personal data of individuals in the European Union?

   • APCI DSS
   • BGDPR
   • CFISMA
   • DHIPAA
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What do NIST CSF implementation tiers primarily describe?

   • AThe legal requirements an organization must meet
   • BThe degree to which an organization's cybersecurity risk management practices exhibit the characteristics of the framework
   • CThe specific security products an organization should purchase
   • DThe number of security incidents an organization has experienced
   Reveal Solution Discussion Select an answer first