NIST Framework Exam 4 UPDATED
ACTUAL Exam Questions and CORRECT
Answers
Core - CORRECT ANSWER - Set of cybersecurity activities, outcomes, and informative
references common across critical infrastructure sectors.
Profile - CORRECT ANSWER - Help organization align cybersecurity activities with
Business requirements, Risk tolerances, Resources.
Implementation Tiers - CORRECT ANSWER - Provide mechanism for organizations to
view and understand the characteristics of their approach to managing cybersecurity risk.
Core: Five Concurrent and Continuous Functions - CORRECT ANSWER - Identify,
Protect, Detect, Respond, Recover
Core: Identify - CORRECT ANSWER - Develop the organizational understanding to
manage cybersecurity risk to systems, assets, data, and capabilities.
Core: Protect - CORRECT ANSWER - Develop and implement appropriate safeguards to
ensure delivery of critical infrastructure services
Core: Detect - CORRECT ANSWER - Develop and implement the appropriate activities
to identify the occurrence of a cybersecurity event
Core: Respond - CORRECT ANSWER - Develop and implement appropriate activities to
take action regarding a detected cybersecurity event.
Core: Recover - CORRECT ANSWER - Develop and implement the appropriate activities
to maintain plans for resilience and to restore any capabilities or services that were impaired due
to a cybersecurity event.
ACTUAL Exam Questions and CORRECT
Answers
Core - CORRECT ANSWER - Set of cybersecurity activities, outcomes, and informative
references common across critical infrastructure sectors.
Profile - CORRECT ANSWER - Help organization align cybersecurity activities with
Business requirements, Risk tolerances, Resources.
Implementation Tiers - CORRECT ANSWER - Provide mechanism for organizations to
view and understand the characteristics of their approach to managing cybersecurity risk.
Core: Five Concurrent and Continuous Functions - CORRECT ANSWER - Identify,
Protect, Detect, Respond, Recover
Core: Identify - CORRECT ANSWER - Develop the organizational understanding to
manage cybersecurity risk to systems, assets, data, and capabilities.
Core: Protect - CORRECT ANSWER - Develop and implement appropriate safeguards to
ensure delivery of critical infrastructure services
Core: Detect - CORRECT ANSWER - Develop and implement the appropriate activities
to identify the occurrence of a cybersecurity event
Core: Respond - CORRECT ANSWER - Develop and implement appropriate activities to
take action regarding a detected cybersecurity event.
Core: Recover - CORRECT ANSWER - Develop and implement the appropriate activities
to maintain plans for resilience and to restore any capabilities or services that were impaired due
to a cybersecurity event.
