D-CSF-SC-23 試験問題を無料オンラインアクセス

Which category addresses the detection of unauthorized code in software?

• A.PR.AT
• B.DE.DP
• C.PR.DS
• D.DE.CM

What are the five functions of the NIST Framework Core?

• A.Governance, Identify, Recover, Respond, and Recover
• B.Identify, Respond, Protect, Detect, and Governance
• C.Protect, Detect, Respond, Governance, and Recover
• D.Identify, Protect, Detect, Respond, and Recover

What is the purpose of the Asset Management category?

• A.Prevent unauthorized access, damage, and interference to business premises and information
• B.Avoid breaches of any criminal or civil law, statutory, regulatory, or contractual obligations
• C.Inventory physical devices and systems, software platform and applications, and communication flows
• D.Support asset management strategy and information infrastructure security policies

What is part of the Pre-Recovery phase?

• A.Backup validation
• B.Validate functionality
• C.Restore assets
• D.Monitor assets

A company failed to detect a breach of their production system. The breach originated from a legacy system that was originally thought to be decommissioned. It turned out that system was still operating and occasionally connected to the production system for reporting purposes.
Which part of the process failed?

• A.ID.AM
• B.ID.BE
• C.PR.DS
• D.DE.CM