Start learning →

B.Tech Cyber Security Cybersecurity Framework Core — practice questions

Explore 6 free Cybersecurity Framework Core questions in B.Tech Cyber Security Cybersecurity. Open each question or exercise to read its content, reference answers and available explanation.

Practise Cybersecurity Framework Core with Quill →

Cybersecurity Framework Core questions and exercises with answers

Showing questions 1–6 of 6.

How many Functions does the CSF 2.0 Core use to organize cybersecurity outcomes at their highest level?Read the answer and worked solution →Which CSF 2.0 Function sits at the centre of the Functions wheel because it informs how the organization implements the other five?Read the answer and worked solution →Under CSF 2.0, restoring assets and operations affected by a cybersecurity incident is the outcome of which Function?Read the answer and worked solution →In CSF 2.0, which Profile specifies the Core outcomes an organization is currently achieving, and characterizes how far each one is being achieved?Read the answer and worked solution →In the five steps for creating and using a CSF Organizational Profile, what happens at step four?Read the answer and worked solution →Split the six Functions by their jobRead the answer and worked solution →

Worked practice questions

How many Functions does the CSF 2.0 Core use to organize cybersecurity outcomes at their highest level?

  1. Six Functions
  2. Five Functions
  3. Seven Functions
  4. Four Functions
Show answer and solution

Correct answer: A. Six Functions

1. Section 2 names the Functions in one line: "The CSF Core Functions -- GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER -- organize cybersecurity outcomes at their highest level." 2. Counting that list gives six. 3. Five is the trap answer because CSF 1.1 had five Functions; GOVERN was added in version 2.0 and is the sixth. 4. A useful cross-check: section 2 also says GOVERN "provides outcomes to inform what an organization may do to achieve and prioritize the outcomes of the other five Functions", which only reads correctly if the total is six. _Source: NIST CSWP 29 "The NIST Cybersecurity Framework (CSF) 2.0" (Feb 2024), section 2 "Introduction to the CSF Core"_

Open this question →

Which CSF 2.0 Function sits at the centre of the Functions wheel because it informs how the organization implements the other five?

  1. IDENTIFY
  2. GOVERN
  3. PROTECT
  4. RECOVER
Show answer and solution

Correct answer: B. GOVERN

1. Section 2 explains why the Functions are drawn as a wheel: "all of the Functions relate to one another". 2. It then singles one out: "GOVERN is in the center of the wheel because it informs how an organization will implement the other five Functions." 3. So GOVERN is the centre, and its position is about influence rather than sequence. 4. IDENTIFY is a common wrong pick because understanding risk feels like the natural first move, but the document places understanding under IDENTIFY and the strategy that directs it under GOVERN. 5. PROTECT and RECOVER sit on the rim like the rest; neither is described as informing the others. _Source: NIST CSWP 29 "The NIST Cybersecurity Framework (CSF) 2.0" (Feb 2024), section 2 "Introduction to the CSF Core"_

Open this question →

Under CSF 2.0, restoring assets and operations affected by a cybersecurity incident is the outcome of which Function?

  1. RESPOND
  2. PROTECT
  3. RECOVER
  4. DETECT
Show answer and solution

Correct answer: C. RECOVER

1. RECOVER is defined as: "Assets and operations affected by a cybersecurity incident are restored." 2. The expansion adds the purpose: RECOVER "supports the timely restoration of normal operations to reduce the effects of cybersecurity incidents and enable appropriate communication during recovery efforts". 3. RESPOND is the near neighbour and the one most often confused with it. RESPOND is "Actions regarding a detected cybersecurity incident are taken", and it "supports the ability to contain the effects" of the incident. 4. So the split is containment versus restoration: RESPOND stops the bleeding, RECOVER puts things back. 5. PROTECT applies safeguards before anything happens, and DETECT finds the incident in the first place. _Source: NIST CSWP 29 "The NIST Cybersecurity Framework (CSF) 2.0" (Feb 2024), section 2 "Introduction to the CSF Core"_

Open this question →

How to practise

  1. Choose a Cybersecurity Framework Core question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Cybersecurity topics

Network SecurityCryptographyIncident Response Life Cycle