Free AKYLADE CRF-002 Exam Questions

Become AKYLADE Certified with updated CRF-002 exam questions and correct answers

Page: 1 / 48

Total 239 Questions | Updated On: Dec 18, 2025

Add To Cart

Question 1

Which of the following occurs within the Protect function of the NIST Cybersecurity Framework?

A : Establishing data encryption and secure information storage solutions

B : Documenting and communicating cybersecurity risks to stakeholders

C : Conducting forensic analysis after a security incident

D : Identifying the cause of an adverse cybersecurity incident

Answer: A

Question 2

Which of the following best describes the purpose of the Identity Management, Authentication, and Access Control (PR.AA) category in the NIST Cybersecurity Framework?

A : To monitor network traffic and detect unauthorized access

B : To control access through identity verification and permissions management

C : To secure physical entry points in information and data systems

D : To conduct cybersecurity training for all organizational administrators and employees

Answer: B

Question 3

A software company identifies a significant risk of source code leaks due to inadequate version control and employee access management. What key elements should be included in their risk management plan to address this issue effectively?

A : Increase general cybersecurity awareness training, especially social engineering attacks, for all employees.

B : Outsource source code development to external contractors to reduce internal risks

C : Implement robust version control systems and restrict access to sensitive information based on roles and responsibilities

D : Conduct a public relations campaign to reassure stakeholders about data security and emphasize cybersecurity training

Answer: C

Question 4

An aeronautical engineering firm works primarily with the Department of Defense and relies heavily upon semiconductors that are manufactured outside the United States. They are concerned about the risk or attack surface associated with foreign made semiconductors. Which of the following subcategories in the NIST Cybersecurity Framework covers the firm’s concern?

A : Asset Management

B : Risk Assessment

C : Data Security

D : Cybersecurity Supply Chain Risk Management

Answer: D

Question 5