Free EMC D-CSF-SC-01 Exam Dumps Questions & Answers

When conducting a risk assessment as part of the NIST Cybersecurity Framework, which of the following elements is critical for identifying risks?

• A.  Network topology
• B.  Organizational policies
• C.  Industry benchmarks
• D.  Asset inventory

Match the following components of the Identify Function with their main purpose.
Component
Asset Inventory
Risk Assessment
Classification Controls
Business Impact Analysis
Purpose
A) Listing and updating assets needing cybersecurity
B) Determining likelihood and impact of cybersecurity risks
C) Categorizing assets based on criticality
D) Identifying essential business functions for recovery

• A.  Asset Inventory - A
  Risk Assessment - B
  Classification Controls - D
  Business Impact Analysis - C
• B.  Asset Inventory - A
  Risk Assessment - C
  Classification Controls - B
  Business Impact Analysis - D
• C.  Asset Inventory - D
  Risk Assessment - C
  Classification Controls - B
  Business Impact Analysis - A
• D.  Asset Inventory - A
  Risk Assessment - B
  Classification Controls - C
  Business Impact Analysis - D

A security audit of the systems on a network must be performed to determine their compliance with security policies.
Which control should be used for the audit?

• A.  RS.MI
• B.  DE.CM
• C.  PR.DS
• D.  ID.AM

The NIST Cybersecurity Framework uses ___ to help organizations evaluate and improve their cybersecurity posture.

• A.  Compliance checks
• B.  Profiles
• C.  Benchmarks
• D.  Vendor evaluations

In the context of the Protect Function, what is the primary role of a Business Continuity Plan (BCP)?

• A.  To monitor network traffic for anomalies
• B.  To create a communication protocol with stakeholders
• C.  To assess risk levels for various assets
• D.  To facilitate quick recovery after a cybersecurity incident