Free EMC D-CSF-SC-23 Exam Dumps Questions & Answers

Which NIST Cybersecurity Framework component defines activities and references for a specific cybersecurity approach?

• A.Core
• B.Category
• C.Tiers
• D.Profile

What determines the technical controls used to restrict access to USB devices and help prevent their use within a company?

• A.Block use of the USB devices for all employees
• B.Written security policy prohibiting the use of the USB devices
• C.Acceptable use policy in the employee HR on-boarding training
• D.Detect use of the USB devices and report users

During what activity does an organization identify and prioritize technical, organizational, procedural, administrative, and physical security weaknesses?

• A.White box testing
• B.Penetration testing
• C.Table top exercise
• D.Vulnerability assessment

A company implemented an intrusion detection system. They notice the system generates a very large number of false alarms.
What steps should the company take to rectify this situation?

• A.Define how to identify and disregard the false alarms
• B.Consider evaluating a system from another vendor
• C.Replace the intrusion detection system with an intrusion protection system
• D.Re-evaluate the Baseline and make necessary adjustments to the detection rules

What categories are specifically contained within the Identify function?

• A.Business Environment
  Asset Management
  Anomalies and Events
• B.Communications
  Supply Chain Management
  Business Environment
• C.Asset Management
  Governance
  Risk Assessment
• D.Supply Chain Risk
  Data Security
  Response Planning