CCP NIST CSF & CIS Controls 2

Question 1

Which NIST CSF 2.0 function was added as a new core function compared to the original 2014 version?

Accepted Answer

Govern

Answer

NIST CSF 2.0 added the 'Govern' function to emphasize cybersecurity governance and risk management strategy.

Question 2

CIS Control 1 (Inventory and Control of Enterprise Assets) is primarily designed to address which risk?

Accepted Answer

Unmanaged or unknown assets that can be exploited

Answer

CIS Control 1 addresses the risk that unmanaged or unknown assets cannot be protected, making them prime targets for attackers.

Question 3

In the NIST CSF, which category under the 'Identify' function addresses understanding the organization's mission, objectives, and stakeholders?

Accepted Answer

Organizational Context

Answer

The 'Organizational Context' category under Identify helps organizations understand their mission, stakeholders, dependencies, and legal requirements.

Question 4

CIS Controls are organized into three Implementation Groups (IGs). Which IG is appropriate for large enterprises with dedicated security staff?

Accepted Answer

IG3

Answer

IG3 targets large enterprises with significant cybersecurity resources and addresses sophisticated, targeted attacks.

Question 5

A company maps its existing security controls to the NIST CSF to identify gaps. This activity is best described as:

Accepted Answer

Current Profile creation

Answer

A Current Profile documents the cybersecurity outcomes an organization currently achieves, enabling gap analysis against a Target Profile.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP NIST CSF & CIS Controls 2