DES-9131 Free Questions – Specialist – Infrastructure Security Exam

1. What are the four tiers of integration within the NIST Cybersecurity Framework?

2. What procedure is designed to enable security personnel to detect, analyze, contain, eradicate, respond, and recover from malicious computer incidents such as a denial-of-service attack?

3. What determines the technical controls used to restrict access to USB devices and help prevent their use within a company?

4. Concerning a risk management strategy, what should the executive level be responsible for communicating?

5. What process is used to identify an organization’s physical, digital, and human resource, as required in their Business Impact Analysis?

6. What supports an organization in making risk management decisions to address their security posture in real time?

7. When should event analysis be performed?

8. What type of system processes information, the loss of which would have a debilitating impact to an organization?

9. Which mechanism within the NIST Cybersecurity Framework describes a method to capture the current state and define the target state for understanding gaps, exposure, and prioritize changes to mitigate risk?

10. The CSF recommends that the Communication Plan for an IRP include audience, method of communication, frequency, and what other element?