Week 1 EC Quiz - Cybersecurity Risk Management

Question 1

Which NIST publication is central to the cybersecurity framework discussed in the book?

Accepted Answer

NIST SP 800-53

Question 2

What is the benefit of using a framework like the NIST CSF?

Accepted Answer

Standardizes risk management approach

Question 3

According to the book, what is the first step in managing cyber risk?

Accepted Answer

Identifying assets

Question 4

Why is a shared understanding of cybersecurity risk important across departments?

Accepted Answer

To enable coordinated defense strategies

Question 5

What role does leadership play in cybersecurity risk management?

Accepted Answer

Setting priorities and allocating resources

Question 6

What does the acronym CSF stand for?

Accepted Answer

Cybersecurity Framework

Question 7

What is a key principle in managing cybersecurity?

Accepted Answer

Understand business objectives

Question 8

1.How many core functions are in the NIST CSF?

Accepted Answer

5

Question 9

What does 'Identify' entail in the NIST CSF?

Accepted Answer

Understanding the business context

Question 10

Which of the following is NOT a core function of the NIST CSF?

Accepted Answer

React

Question 11

Which part of the CSF helps restore capabilities after a cyberattack?

Accepted Answer

Recover

Question 12

What’s a common mistake organizations make about cybersecurity risk?

Accepted Answer

Assuming IT is solely responsible

Question 13

The NIST CSF was originally developed for which sector?

Accepted Answer

Critical Infrastructure

Question 14

What term is used for the overall process of assessing and mitigating cyber risk?

Accepted Answer

Risk management

Question 15

Which best describes a cybersecurity threat?

Accepted Answer

Phishing Email

Question 16

Cybersecurity governance involves aligning practices with what?

Accepted Answer

Business goals and compliance needs

Question 17

What function of the CSF focuses on developing and implementing safeguards?

Accepted Answer

Protect

Question 18

Which element of the CSF includes incident response planning?

Accepted Answer

Respond

Question 19

What is one key reason why cybersecurity risk management is necessary?

Accepted Answer

Because every organization has data and systems that are valuable

Question 20

What is the primary goal of cybersecurity risk management?

Accepted Answer

To minimize risk to an acceptable level

Questions 20