Free AKYLADE CRF-002 Exam Questions

Become AKYLADE Certified with updated CRF-002 exam questions and correct answers

Page: 1 / 48

Total 239 Questions | Updated On: Feb 19, 2025

Add To Cart

Question 1

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Question 2

A software company identifies a significant risk of source code leaks due to inadequate version control and employee access management. What key elements should be included in their risk management plan to address this issue effectively?

A : Increase general cybersecurity awareness training, especially social engineering attacks, for all employees.

B : Outsource source code development to external contractors to reduce internal risks

C : Implement robust version control systems and restrict access to sensitive information based on roles and responsibilities

D : Conduct a public relations campaign to reassure stakeholders about data security and emphasize cybersecurity training

Answer: C

Question 3

A healthcare provider is enhancing its cybersecurity policies to better protect patient information, particularly by implementing stricter access controls and auditing mechanisms to detect any unauthorized access or data manipulation. This is part of their compliance efforts with health data protection regulations. Which subcategory in the NIST Cybersecurity Framework could best guide the implementation of these stricter access controls and auditing mechanisms?

A : PR.AA-05

B : DE.AE-02

C : GV.OV-01

D : PR.AT-02

Answer: A

Question 4

In what way does the NIST Cybersecurity Framework's nature impact its adoption across various industries and sectors, including critical infrastructure and small businesses?

A : Mandates compliance which could strain resources for sectors not typically targeted by cybersecurity regulations

B : Limits its use strictly to government entities required to implement it by regulation to maintain compliance throughout organizations

C : Encourages a wider adoption by allowing organizations to tailor the guidelines to their specific needs and capabilities

D : Discourages small businesses from adopting it due to the perceived complexity and cost which ensures its elite status

Answer: C

Question 5

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Page: 1 / 48

Total 239 Questions | Updated On: Feb 19, 2025

Add To Cart