Akylade Certified Cyber Resilience Fundamentals ACCRF · Free Practice Question Medium
Question 9
Which of the following best describes the purpose of the Adverse Event Analysis (DE.AE) category in the NIST Cybersecurity Framework?
- A To analyze and understand the causes of cybersecurity incidents
- B To audit and ensure compliance with cybersecurity regulations
- C To implement strategies for data backup and disaster recovery
- D To provide real-time defenses against cyber threats
Reveal correct answer
Correct answer: A
Explanation
The DE.AE category is focused on examining the reasons behind cybersecurity incidents, providing valuable insights that help refine response tactics and prevent future occurrences. Auditing and compliance are crucial but generally fall under the oversight and governance categories, not directly linked to analyzing adverse events. While real-time defenses are critical, they are more related to immediate protective measures rather than the analysis of adverse events. Data backup and disaster recovery are essential, but they pertain more to the Recover function, specifically to ensuring operational continuity after an incident. For support or reporting issues, include Question ID: 661c99987f25571005e9c29f in your ticket. Thank you.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
