Match each Respond Function component with its primary purpose.
Component
Containment
Communications Plan
Incident Analysis
After-Action Review
Purpose
A) Limiting the spread of the incident
B) Guidelines for internal and external updates
C) Identifying the root cause of the incident
D) Evaluating response effectiveness

• A.Containment - A
  Communications Plan - B
  Incident Analysis - C
  After-Action Review - D
• B.Containment - C
  Communications Plan - B
  Incident Analysis - A
  After-Action Review - D
• C.Containment - A
  Communications Plan - D
  Incident Analysis - C
  After-Action Review - B
• D.Containment - A
  Communications Plan - C
  Incident Analysis - B
  After-Action Review - D

Comment: *

Name: *

Email: *

Verification: *

A company failed to detect a breach of their production system. The breach originated from a legacy system that was originally thought to be decommissioned. It turned out that system was still operating and occasionally connected to the production system for reporting purposes.
Which part of the process failed?

• A.PR.DS
• B.ID.AM
• C.DE.CM
• D.ID.BE

Comment: *

Name: *

Email: *

Verification: *

Which NIST Cybersecurity Framework function should be executed before any others?

• A.Protect
• B.Identify
• C.Recover
• D.Respond

Comment: *

Name: *

Email: *

Verification: *

One of the five core functions in the NIST Cybersecurity Framework is ___, which focuses on minimizing the impact of cybersecurity events.

• A.Recover
• B.Protect
• C.Respond
• D.Detect

Comment: *

Name: *

Email: *

Verification: *

Which of the following are components of the Protect Function in the NIST Framework? (Select two)

• A.Recovery Strategy
• B.Data Security
• C.Awareness Training
• D.Incident Response Planning

Comment: *

Name: *

Email: *

Verification: *