Practice Free D-CSF-SC-01 Exam Online Questions
The Identify Function helps establish a ___________ to assess and categorize organizational assets by their importance.
- A . Baseline configuration
- B . Risk mitigation strategy
- C . Comprehensive inventory
- D . Security awareness program
Within the COBIT 2019 framework, the governance objective is to ensure that ___ is consistently addressed throughout the organization.
- A . Risk management
- B . Data privacy
- C . Security policy updates
- D . Continuous improvement
Within the COBIT 2019 framework, the governance objective is to ensure that ___ is consistently addressed throughout the organization.
- A . Risk management
- B . Data privacy
- C . Security policy updates
- D . Continuous improvement
Which function of the NIST Cybersecurity Framework should be prioritized first in building a cybersecurity strategy?
- A . Identify
- B . Protect
- C . Detect
- D . Recover
The structure of the NIST Cybersecurity Framework is built around how many core functions?
- A . 5
- B . 4
- C . 6
- D . 7
The ___ function in the NIST Cybersecurity Framework is primarily focused on maintaining resilience after cybersecurity events.
- A . Respond
- B . Recover
- C . Identify
- D . Protect
What supports an organization in making risk management decisions to address their security posture in real time?
- A . Baseline reporting
- B . Continuous monitoring
- C . User access reviews
- D . Video surveillance
What is the primary purpose of the COBIT 2019 governance framework in the context of cybersecurity?
- A . To improve firewall configurations
- B . To ensure alignment between business goals and cybersecurity strategy
- C . To enforce external compliance regulations
- D . To manage software development processes
One of the key categories in the Cybersecurity Framework is ___, which focuses on protecting critical infrastructure services.
- A . Asset management
- B . Protective technology
- C . Awareness training
- D . Risk assessment
A retail company experiences a data breach affecting customer records. The Incident Response Plan calls for immediate containment and communication with affected customers.
Which Respond Function subcategories are directly addressed in this response?
- A . Detection and Analysis
- B . Containment and Communication
- C . Recovery and Documentation
- D . Risk Assessment and Training