CSC NIST Risk Management Framework 3

Question 1

Which RMF step involves continuously tracking changes to the system and its environment that may affect security posture?

Accepted Answer

Monitor

Answer

The Monitor step requires ongoing surveillance of security controls, system changes, and threat environment to maintain situational awareness.

Question 2

What triggers a significant change review that may require re-authorization of a system under the RMF?

Accepted Answer

Upgrading the operating system to a new major version

Answer

Major changes that significantly alter the system's attack surface or risk profile, such as OS upgrades, typically require a significant change review or re-authorization.

Question 3

What is the concept of 'ongoing authorization' in the modern RMF?

Accepted Answer

Continuously monitoring and authorizing systems based on real-time risk data rather than fixed review cycles

Answer

Ongoing authorization shifts from point-in-time assessments to a continuous process where risk decisions are based on real-time monitoring data.

Question 4

Which step in the RMF was added in Revision 2 of NIST SP 800-37 to better align security with the system development lifecycle?

Accepted Answer

Prepare

Answer

The Prepare step was added in SP 800-37 Rev. 2 to establish context and organizational priorities before executing the remaining RMF steps.

Question 5

What is the purpose of the common control inheritance model in the RMF?

Accepted Answer

To enable systems to leverage security controls implemented by a provider organization, reducing duplication

Answer

Common control inheritance allows systems to leverage controls (e.g., physical security, HR policies) already implemented at an organizational level, reducing redundant implementation effort.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC NIST Risk Management Framework 3