vmartinez

 

Security teams use the NIST Cybersecurity Framework (CSF) as a baseline to manage short and long-term risk.

 

• True

 

• False

 

 

What is a foundational model that informs how organizations consider risk when setting up systems and security policies?

 

• Cybersecurity Framework (CSF)
• Sensitive personally identifiable information (SPII)
• Confidentiality, integrity, and availability (CIA) triad
• General Data Protection Regulation law (GDPR)

 

 

An organization requires its employees to complete a new data privacy training program each year to reduce the risk of a data breach. What is this training requirement an example of?

 

• Security control

• Data confidentiality
• Cybersecurity Framework (CSF)
• Personally identifiable information (PII)

 

 

Fill in the blank: A security _____ is a set of guidelines used for building plans to help mitigate risk and threats to data and privacy.

 

• control
• framework
• regulation
• lifecycle

 

 

Which of the following tasks may be part of the identity and access management domain? Select all that apply.

 

• Conducting security control testing
• Setting up an employee’s access keycard
• Ensuring users follow established policies
• Controlling physical assets

 

 

A security professional is optimizing data security by ensuring that effective tools, systems, and processes are in place. Which domain does this scenario describe?

 

• Communication and network security
• Security architecture and engineering
• Security and risk management
• Identity and access management