QUESTION 24
When aligning to the NIST Cybersecurity Framework, what should occur after tier levels and framework core outcomes are determined?

QUESTION 25
Which of the following is one of the objectives of CSF Step 6: Determine, Analyze and Prioritize Gaps?

QUESTION 26
An organization is concerned that there will be resistance in attempts to close gaps between the current and target profiles. Which of the following is the BEST approach to gain support for the process?

QUESTION 27
Which role will benefit MOST from a better understanding of the current cybersecurity posture by applying the CSF?

QUESTION 28
What is the MOST important reason to compare framework profiles?

QUESTION 29
Which COBIT implementation phase directs the development of an action plan based on the outcomes described in the Target Profile?

QUESTION 30
Documenting opportunities for improvement occurs within which implementation phase?

QUESTION 31
Which of the following represents a best practice for completing CSF Step 3: Create a Current Profile?

QUESTION 32
Which of the following should an organization review to gain a better understanding of the likelihood and impact of cybersecurity events?

QUESTION 33
During Step 3: Create a Current Profile, an enterprise outcome has reached a 95% subcategory maturity level.
How would this level of achievement be
described in the COBIT Performance Management Rating Scale?

QUESTION 34
Which of the following is MOST likely to cause an organization’s NIST Cybersecurity Framework (CSF) implementation to fail?

QUESTION 35
Which of the following COBIT tasks and activities corresponds to CSF Step 1: Prioritize and Scope?

QUESTION 36
Combining CSF principles with COBIT 2019 practices helps to ensure value, manage risk, and support mission drivers through support and direction of:

QUESTION 37
Within the CSF Core structure, which type of capability can be implemented to help practitioners recognize potential or realized risk to enterprise assets?

QUESTION 38
The activity of determining an appropriate target capability level for each process occurs within which implementation phase?

QUESTION 39
What does a CSF Informative Reference within the CSF Core provide?

QUESTION 40
Which of the following COBIT and NIST implementation steps may be reversed depending on the culture of the organization?

QUESTION 41
Which of the following is a framework principle established by NIST as an initial framework consideration?

QUESTION 42
Which of the following is an important consideration when defining the roadmap in COBIT Implementation Phase 3 – Where Do We Want to Be?

QUESTION 43
Which information should be collected for a Current Profile?