Revision

Which of the following is not one of the five NIST CSF core functions?

• Identify

• Detect

• Authenticate

• Respond

The “Recover” function of NIST CSF primarily focuses on:

• Preventing attacks

• Maintaining business continuity and restoring services

• Identifying vulnerabilities

• Monitoring system logs

Which of the following is the primary goal of security awareness training?

• Install firewalls

• Reduce human error and phishing susceptibility

• Patch software vulnerabilities

• Monitor networks

An employee accidentally clicks a phishing email link, giving attackers access to the corporate network.

• 1. Identify the security gap.

• 2. Suggest training or mitigation measures.

The principle of least privilege means:

• Users get access to all systems by default

• Users are given only the access necessary to perform their job

• Admins have minimal access

• All employees share credentials

________ controls verify that a user is who they claim to be.

________ controls determine what a user can do after authentication.

Which of the following is not a typical step in an IRP?

• Identification

• Containment

• Mitigation

• Employee termination

Continuous monitoring helps:

• Prevent all cyberattacks

• Detect incidents early and trigger responses

• Replace firewalls

• Eliminate supply chain risks

A hospital detects unusual network traffic that may indicate ransomware.

Q. How would monitoring support containment and recovery?