CAF

19 termsStudBud Administration4 plays

Imported from external platform

Flashcards19 cardsFPractice quizPHost liveL

Questions 19

Answers

1
Which principle emphasises incident response plans?
Principle D.1
Principle C.1
Principle B.4
Principle A.2
2
What does CAF support regarding supply chains?
No supply chain focus
Only focusing on internal
Considering risks
Ignoring risks
3
What is the purpose of CAF assessments?
To create policies
To ensure compliance
To assess cyber resilience
To train staff
4
What is the focus of Principle B.4?
System and network security
Incident response
Identity control
Data protection
5
Who is responsible for conducting CAF assessments?
Only external auditors
Only internal staff
Self-assessment and review
Government officials
6
Which principle focuses on identity control?
Principle B.2
Principle B.3
Principle A.1
Principle B.1
7
What does Principle B.5 focus on?
Incident response
Data protection
Managing vulnerabilities
Identity control
8
What does CAF encourage regarding risk management?
A risk-based approach
A prescriptive approach
No risk management
A reactive approach
9
Which principle focuses on monitoring systems?
Principle D.2
Principle B.3
Principle C.1
Principle C.2
10
What is the highest maturity level in CAF assessments?
Established
Advanced
Basic
Evolving
11
What is the main goal of the CAF framework?
To limit access
To improve cyber security
To create regulations
To reduce costs
12
What is the focus of Principle B.6?
Staff Awareness and Training
Governance
Proactive Security Event Discovery
None - There is no B6
13
What does CAF stand for?
Critical Assessment Framework
Cyber Analysis Framework
Cybersecurity Assessment Framework
Cyber Assessment Framework
14
What does CAF recommend for access control?
Secure authentication
Password only
Multi-factor authentication
Single-factor authentication
15
How many top-level objectives does CAF have?
4
14
16
8
16
How often should incident response plans be tested?
Once a year
Only when incidents occur
Never
Regularly
17
What is the purpose of maintaining asset inventories?
To manage costs
To track software
To ensure resilience
To train staff
18
Who should organisations engage with according to CAF?
Only internal staff
Only regulators
External stakeholders
No engagement needed
19
What is the main focus of Principle A.1?
data protection
risk management
governance framework
incident response

CAF Flashcards | StudBud

CAF

19 termsStudBud Administration4 plays

Imported from external platform

Flashcards19 cardsFPractice quizPHost liveL

Questions 19

Answers

1
Which principle emphasises incident response plans?
Principle D.1
Principle C.1
Principle B.4
Principle A.2
2
What does CAF support regarding supply chains?
No supply chain focus
Only focusing on internal
Considering risks
Ignoring risks
3
What is the purpose of CAF assessments?
To create policies
To ensure compliance
To assess cyber resilience
To train staff
4
What is the focus of Principle B.4?
System and network security
Incident response
Identity control
Data protection
5
Who is responsible for conducting CAF assessments?
Only external auditors
Only internal staff
Self-assessment and review
Government officials
6
Which principle focuses on identity control?
Principle B.2
Principle B.3
Principle A.1
Principle B.1
7
What does Principle B.5 focus on?
Incident response
Data protection
Managing vulnerabilities
Identity control
8
What does CAF encourage regarding risk management?
A risk-based approach
A prescriptive approach
No risk management
A reactive approach
9
Which principle focuses on monitoring systems?
Principle D.2
Principle B.3
Principle C.1
Principle C.2
10
What is the highest maturity level in CAF assessments?
Established
Advanced
Basic
Evolving
11
What is the main goal of the CAF framework?
To limit access
To improve cyber security
To create regulations
To reduce costs
12
What is the focus of Principle B.6?
Staff Awareness and Training
Governance
Proactive Security Event Discovery
None - There is no B6
13
What does CAF stand for?
Critical Assessment Framework
Cyber Analysis Framework
Cybersecurity Assessment Framework
Cyber Assessment Framework
14
What does CAF recommend for access control?
Secure authentication
Password only
Multi-factor authentication
Single-factor authentication
15
How many top-level objectives does CAF have?
4
14
16
8
16
How often should incident response plans be tested?
Once a year
Only when incidents occur
Never
Regularly
17
What is the purpose of maintaining asset inventories?
To manage costs
To track software
To ensure resilience
To train staff
18
Who should organisations engage with according to CAF?
Only internal staff
Only regulators
External stakeholders
No engagement needed
19
What is the main focus of Principle A.1?
data protection
risk management
governance framework
incident response