CSL CSL Government & Critical Infrastructure Security Law

Question 1

Which U.S. federal agency has the primary civilian cybersecurity mission for protecting critical infrastructure under the Cybersecurity and Infrastructure Security Agency Act of 2018?

Accepted Answer

CISA

Answer

CISA was established as the nation's cyber defense agency with responsibility for protecting federal civilian networks and coordinating critical infrastructure security.

Question 2

Presidential Policy Directive 21 (PPD-21) designates how many critical infrastructure sectors in the United States?

Accepted Answer

16 sectors

Answer

PPD-21 identifies 16 critical infrastructure sectors whose disruption would have a debilitating effect on national security, economic security, or public health and safety.

Question 3

What law requires federal agencies to implement a risk-based cybersecurity program based on the NIST Cybersecurity Framework and mandates annual security assessments?

Accepted Answer

Federal Information Security Management Act (FISMA)

Answer

FISMA, as modernized in 2014, requires federal agencies to develop, document, and implement agency-wide information security programs and report to Congress annually.

Question 4

The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) of 2022 requires critical infrastructure entities to report covered cyber incidents to CISA within:

Accepted Answer

72 hours

Answer

CIRCIA requires covered critical infrastructure entities to report covered cyber incidents to CISA within 72 hours and ransomware payments within 24 hours.

Question 5

Which Executive Order significantly strengthened U.S. federal cybersecurity requirements following the SolarWinds attack, mandating zero trust architecture and software supply chain security?

Accepted Answer

Executive Order 14028 (2021)

Answer

EO 14028, 'Improving the Nation's Cybersecurity,' issued in May 2021, mandated zero trust architecture, enhanced logging, software bill of materials (SBOMs), and incident response improvements.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL CSL Government & Critical Infrastructure Security Law