Online Access Free D-CSF-SC-23 Exam Questions

A continuously updated CMDB is an output of which NIST function and category?

• A.ID.SC
• B.ID.BE
• C.ID.AM
• D.ID.RM

Concerning a risk management strategy, what should the executive level be responsible for communicating?

• A.Risk tolerance
• B.Asset risk
• C.Risk profile
• D.Risk mitigation

What determines the technical controls used to restrict access to USB devices and help prevent their use within a company?

• A.Acceptable use policy in the employee HR on-boarding training
• B.Block use of the USB devices for all employees
• C.Detect use of the USB devices and report users
• D.Written security policy prohibiting the use of the USB devices

What is a result of an incomplete organizational asset identification process?

• A.Risk will be introduced into the organization
• B.Purchases will be delayed by the organization
• C.System disruptions will have less impact on the organization
• D.Vendors will not receive payment from the organization

Which document identifies cash flow losses, cost of equipment replacement, salaries paid for backlog, and financial loss linked to failures?

• A.Business Continuity Plan
• B.Risk Assessment Strategy
• C.Business Impact Analysis
• D.Disaster Recovery Plan