Home › BCA Cyber Security › cybersecurity › Cybersecurity Fundamentals › Within the RESPOND function, ANALYSIS of detecte…
Within the RESPOND function, ANALYSIS of detected incidents and COMMUNICATIONS with stakeholders both happen. Which other category falls under RESPOND?
AAsset Management
BMitigation
CAnomalies & Events
DRecovery Planning
Answer & Solution
Correct answer: B. Mitigation
1. RESPOND function categories per NIST CSF v1.1: Response Planning (RS.RP), Communications (RS.CO), Analysis (RS.AN), MITIGATION (RS.MI), Improvements (RS.IM).
2. MITIGATION (RS.MI) includes: containing the incident, eradicating threats, documenting findings.
3. Option A (Asset Mgmt) belongs to IDENTIFY. Option C (Anomalies & Events) belongs to DETECT. Option D (Recovery Planning) belongs to RECOVER.
4. Knowing where categories sit in the framework is a common GATE/BCA exam question.
5. Quick check: any category code starting with RS belongs to RESPOND; RC = RECOVER, DE = DETECT, ID = IDENTIFY, PR = PROTECT.
_Source: NIST Cybersecurity Framework v1.1, Appendix A — Framework Core (Respond function categories), p. 30-32._
Related questions
A HASH FUNCTION (e.g. SHA-256) used for password storage should beWhich of the following is a TYPE of MALWARE that encrypts files and demands payment for thA SECURITY INCIDENT is BEST defined asDEFENSE IN DEPTH is a strategy thatWhich authentication method requires the user to present at least TWO different categoriesPRINCIPLE OF LEAST PRIVILEGE states thatRisk is commonly expressed as a function ofWhich NIST CSF function ensures that PLANS to RESTORE capabilities or services are execute