A continuously updated CMDB is an output of which NIST function and category?

• A.IAM
• B.ID.RM
• C.ID.SC
• D.ID.BE

Comment: *

Name: *

Email: *

Verification: *

An IT security engineer grants an auditor access to a conference room and provides temporary wireless access to them to conduct an analysis for the company's annual financial report. Which category addresses the ability to prevent access to the Internet while being able to browse a designated set of folders on the LAN?

• A.RC.CO
• B.PR.IP
• C.ID.AM
• D.PR.AC

Comment: *

Name: *

Email: *

Verification: *

What helps an organization compare an "as-is, to-be" document and identify opportunities for improving cybersecurity posture useful for capturing organizational baselines of today and their desired state of tomorrow so that a gap analysis can be conducted?

• A.Framework
• B.Profile
• C.Core
• D.Assessment

Comment: *

Name: *

Email: *

Verification: *

The primary purpose of a Communications Plan within the Respond Function is to:

• A.Develop risk assessment criteria
• B.Establish guidelines for internal and external communication
• C.Define recovery strategies
• D.Train employees on security protocols

Comment: *

Name: *

Email: *

Verification: *

Which KPIs might be developed around controls within the Identify Function? (Select two)

• A.Percentage of assets with updated classification
• B.Number of incidents reported annually
• C.Number of users trained in cybersecurity awareness
• D.Frequency of inventory audits

Comment: *

Name: *

Email: *

Verification: *