Online Access Free DES-9131 Exam Questions

A new employee is starting work at your company. When should they be informed of the company's security policy?

• A.Annual security policy review
• B.After the first security infraction
• C.Based on human resource policy
• D.During regular security awareness sessions

What is the main goal of a gap analysis in the Identify function?

• A.Identify gaps between Cybersecurity Framework and Cyber Resilient Lifecycle pertaining to that function
• B.Identify business process gaps to improve business efficiency
• C.Determine security controls to improve security measures
• D.Determine actions required to get from the current profile state to the target profile state

An incident has occurred. You restore backups onto mission/business critical assets. After restoration of the backups your services are still inaccessible on numerous assets.
What could be the cause of the issue?

• A.Network failure
• B.Incorrect backup strategy
• C.Unverified backups
• D.Hardware failure

A security engineer is responsible for monitoring company software, firmware, system OS, and applications for known vulnerabilities. How should they stay current on exploits and information security?

• A.Update company policies and procedures
• B.Revise vulnerability management plan
• C.Subscribe to security mailing lists
• D.Implement security awareness training

Which NIST Cybersecurity Framework category ensures that organizational communication and data flows are mapped?

• A.ID.GV
• B.ID.RA
• C.ID.AM
• D.ID.SC