NIST Lesson 1: Review Questions with
verified answers
Which security related phrase relates to the integrity of data? - correct answer ✔✔
Modification
An engineer looks to implement security measures by following the five functions in the
National Institute of Standards and Technology (NIST) Cybersecurity Framework. When
documenting the "detect" function, what does the engineer focus on? - correct answer ✔✔
Ongoing proactive monitoring
How might the goals of basic network management not be well-aligned with the goals of
security? - correct answer ✔✔ Management focuses on availability over confidentiality.
Any external responsibility for an organization's security lies mainly with which individuals? -
correct answer ✔✔ The owner
The National Institute of Standards and Technology (NIST) provides a framework that classifies
security-related functions. Which description aligns with the "respond" function? - correct
answer ✔✔ Identify, analyze, and eradicate threats
A company has an annual contract with an outside firm to perform a security audit on their
network. The purpose of the annual audit is to determine if the company is in compliance with
their internal directives and policies for security control. Select the broad class of security
control that accurately demonstrates the purpose of the audit. - correct answer ✔✔ Managerial
The ________ requires federal agencies to develop policies for computer systems that process
confidential information. - correct answer ✔✔ Computer Security Act
verified answers
Which security related phrase relates to the integrity of data? - correct answer ✔✔
Modification
An engineer looks to implement security measures by following the five functions in the
National Institute of Standards and Technology (NIST) Cybersecurity Framework. When
documenting the "detect" function, what does the engineer focus on? - correct answer ✔✔
Ongoing proactive monitoring
How might the goals of basic network management not be well-aligned with the goals of
security? - correct answer ✔✔ Management focuses on availability over confidentiality.
Any external responsibility for an organization's security lies mainly with which individuals? -
correct answer ✔✔ The owner
The National Institute of Standards and Technology (NIST) provides a framework that classifies
security-related functions. Which description aligns with the "respond" function? - correct
answer ✔✔ Identify, analyze, and eradicate threats
A company has an annual contract with an outside firm to perform a security audit on their
network. The purpose of the annual audit is to determine if the company is in compliance with
their internal directives and policies for security control. Select the broad class of security
control that accurately demonstrates the purpose of the audit. - correct answer ✔✔ Managerial
The ________ requires federal agencies to develop policies for computer systems that process
confidential information. - correct answer ✔✔ Computer Security Act
