[Q46-Q63] リアルEMC D-CSF-SC-23試験問題 [更新されたのは2024年]

リアルEMC D-CSF-SC-23試験問題 [更新されたのは2024年]

D-CSF-SC-23試験問題集で合格させるのは更新されたのは2024年年最新のNIST Cybersecurity Framework 2023 Exam

EMC D-CSF-SC-23認定試験は、NISTサイバーセキュリティフレームワークの5つのコア機能をカバーしています。この試験では、サイバーセキュリティのリスクと脆弱性を評価し、サイバーセキュリティのポリシーと手順を開発および実装し、サイバー脅威から保護し、サイバーインシデントを検出して対応し、サイバー攻撃から回復する候補者の能力を評価します。この包括的な認定試験は、業界標準に基づいてサイバーセキュリティプログラムを実施するスキルと知識を検証したいサイバーセキュリティの専門家に最適です。

EMC D-CSF-SC-23試験は、リスク管理、脅威インテリジェンス、インシデント対応、セキュリティガバナンスなど、NISTサイバーセキュリティフレームワークに関連する幅広いトピックをカバーしています。候補者は、フレームワークのコア機能とそれらが重要インフラ、ヘルスケア、金融などの異なる文脈でどのように適用されるかを示すことが期待されています。

質問 # 46
Rank order the relative severity of impact to an organization of each plan, where "1" signifies the most impact and "4" signifies the least impact.

正解：

解説：

質問 # 47
To generate an accurate risk assessment, organizations need to gather information in what areas?

A. Assets, Threats, Vulnerabilities, and Impact
B. Assets, Vulnerabilities, Security, and Response
C. Inventory, Threats, Security, and Impact
D. Inventory, Security, Response, and Impact

正解：A

質問 # 48
An IT security engineer grants an auditor access to a conference room and provides temporary wireless access to them to conduct an analysis for the company's annual financial report.
Which category addresses the ability to prevent access to the Internet while being able to browse a designated set of folders on the LAN?

A. ID.AM
B. RC.CO
C. PR.IP
D. PR.AC

正解：D

質問 # 49
What database is used to record and manage assets?

A. Patch Management Inventory Database
B. High Availability Mirrored Database
C. Configuration Management Database
D. Asset Inventory Management Database

正解：C

質問 # 50
What must be done before returning a compromised laptop to normal operations in the environment?

A. Perform a virus scan
B. Eliminate the root cause of the compromise
C. Device cannot be returned to the environment
D. Re-image the device

正解：B

質問 # 51
What activity is supported by the Protect function in the NIST Cybersecurity Framework Core?

A. Manage cybersecurity risk to systems, assets, and data
B. Ensure delivery of critical infrastructure services
C. Ensure resilience and restore services impacted by a cybersecurity event
D. Take action regarding a detected cybersecurity event

正解：A

質問 # 52
What procedure is designed to enable security personnel to detect, analyze, contain, eradicate, respond, and recover from malicious computer incidents such as unauthorized changes to system hardware, software, or data?

A. Crisis Communication Plan
B. Incident Response Plan
C. Emergency Analysis Plan
D. Disaster Recovery Plan

正解：B

質問 # 53
What are the four tiers of integration within the NIST Cybersecurity Framework?

A. Partial, Risk Informed, Repeatable, and Adaptive
B. Corrective, Risk Informed, Repeatable, and Adaptive
C. Selective, Repeatable, Partial, and Adaptive
D. Risk Informed, Selective, Repeatable, and Partial

正解：A

質問 # 54
What is concerned with availability, reliability, and recoverability of business processes and functions?

A. Recovery Strategy
B. Business Continuity Plan
C. Business Impact Analysis
D. Disaster Recovery Plan

正解：B

質問 # 55
A security engineer is responsible for monitoring company software, firmware, system OS, and applications for known vulnerabilities.
How should they stay current on exploits and information security?

A. Update company policies and procedures
B. Subscribe to security mailing lists
C. Revise vulnerability management plan
D. Implement security awareness training

正解：B

質問 # 56
What entity offers a framework that is ideally suited to handle an organization's operational challenges?

A. ISO
B. NIST
C. COSO
D. COBIT

正解：A

質問 # 57
A company implemented an intrusion detection system. They notice the system generates a very large number of false alarms.
What steps should the company take to rectify this situation?

A. Re-evaluate the Baseline and make necessary adjustments to the detection rules
B. Consider evaluating a system from another vendor
C. Replace the intrusion detection system with an intrusion protection system
D. Define how to identify and disregard the false alarms

正解：A

質問 # 58
What is the main goal of a gap analysis in the Identify function?

A. Determine actions required to get from the current profile state to the target profile state
B. Identify gaps between Cybersecurity Framework and Cyber Resilient Lifecycle pertaining to that function
C. Identify business process gaps to improve business efficiency
D. Determine security controls to improve security measures

正解：A

質問 # 59
What is a result of an incomplete organizational asset identification process?

A. System disruptions will have less impact on the organization
B. Purchases will be delayed by the organization
C. Vendors will not receive payment from the organization
D. Risk will be introduced into the organization

正解：D

質問 # 60
Which document provides an implementation plan to recover business functions and processes during and after an event?

A. Business Continuity Plan
B. Business Impact Analysis
C. Risk Assessment Strategy
D. Disaster Recovery Plan

正解：A

質問 # 61
What three steps are required to complete a Business Impact Analysis?

A. Identify the extent of the breach
Construct an effective incident response plan
Implement a recovery plan
B. Aggregate and correlate data from multiple sources and sensors
Establish incident alert thresholds
Communicate event detection to appropriate parties
C. Determine mission / business processes and recovery criticality
Identify resource requirements
Identify recovery priorities for system resources
D. Create asset inventory of existing systems
Establish an initial baseline
Communicate requirements to appropriate parties

正解：C

質問 # 62
Refer to the exhibit.

Your organization's security team has been working with various business units to understand their business requirements, risk tolerance, and resources used to create a Framework Profile. Based on the Profile provided, what entries correspond to labels A, B, and C?