How do current and target profiles in NIST CSF help an organization?

They guarantee compliance with all regulations

They identify gaps between the current state and desired outcomes, informing prioritization of improvements

They replace the need for risk assessments

They determine the exact security products to purchase

A global organization is subject to GDPR and HIPAA and is adopting the NIST CSF. The security team has limited resources and must decide whether to implement a centralized logging solution or a data classification scheme. The organization currently has no formal incident response plan. Which initiative should be prioritized to best address regulatory requirements and improve overall security posture?

Implement centralized logging, as it supports detection and response

Develop an incident response plan, as it is required by GDPR and HIPAA

Implement data classification, as it helps protect sensitive data

Implement all three initiatives simultaneously

SplunkCertified Cybersecurity Defense Architect

Domain 6Objective 1

Explain How Governmental Directives and Regulations Guidance Publications Like NIST CSF Help Influence the Design of Defense Capabilities. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Part of the Governance, Risk, and Compliance domain, which accounts for 10% of the CYBERSECURITY-DEFENSE-ARCHITECT exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

10%of the exam

Questions 21–25

21application · medium
A U.S. healthcare organization is subject to HIPAA and is designing its security architecture. The security team wants to ensure that all ePHI is encrypted. Which regulation or framework is the primary driver for this requirement?
Select an answer first
22foundation · easy
Which NIST CSF implementation tier is characterized by an organization that has formalized risk management practices and is able to adjust them based on changing threats and lessons learned?
Select an answer first
23foundation · easy
How do current and target profiles in NIST CSF help an organization?
Select an answer first
24foundation · easy
Which of the following is one of the five core functions of the NIST Cybersecurity Framework?
Select an answer first
25expert · hard
A global organization is subject to GDPR and HIPAA and is adopting the NIST CSF. The security team has limited resources and must decide whether to implement a centralized logging solution or a data classification scheme. The organization currently has no formal incident response plan. Which initiative should be prioritized to best address regulatory requirements and improve overall security posture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-DEFENSE-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CYBERSECURITY-DEFENSE-ARCHITECT” is a trademark of its owner, used for identification only.

Explain How Governmental Directives and Regulations Guidance Publications Like NIST CSF Help Influence the Design of Defense Capabilities. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 5)

Questions 21–25

A U.S. healthcare organization is subject to HIPAA and is designing its security architecture. The security team wants to ensure that all ePHI is encrypted. Which regulation or framework is the primary driver for this requirement?

Which NIST CSF implementation tier is characterized by an organization that has formalized risk management practices and is able to adjust them based on changing threats and lessons learned?

How do current and target profiles in NIST CSF help an organization?

Which of the following is one of the five core functions of the NIST Cybersecurity Framework?

Keep studying — Governance, Risk, and Compliance