NIST Cybersecurity Framework Quiz
Test your knowledge of the NIST cybersecurity framework with this quiz. Learn about the guidelines, best practices, and standards for improving cybersecurity posture and responding to cyber incidents.
Recommended next
10 questions ready
Start with a quiz
Answer from memory first, then use the existing quiz review flow for anything you miss.
Activities
Quiz10 Questions
Flashcards10 Cards
Study Notes1 Note
Podcast1 Episode
Modules
Learn in sequence
Start with the earlier modules and work forward. Each one builds on the last, so the course gets more advanced as you go.
NIST Cybersecurity Framework Quiz
Quiz • 10 Questions
NIST Cybersecurity Framework Quiz - Flashcards
Flashcards • 10 Cards
Study Notes
2 min • Summary
NIST Cybersecurity Framework Quiz - Podcast
Podcast
Materials
List of Questions10 questions
- Question 1
- Session Hijacking
- Phishing
- Denial of Service
- Man in the middle attacks
- Question 2
- Ransomware
- DNS Spoofing
- Brute force
- Man in the middle attacks
- Question 3
- SQL injection
- URL Interpretation
- Dictionary attacks
- Session Hijacking
- Question 4
- URL Interpretation
- Phishing
- DNS Spoofing
- Session Hijacking
- Question 5
- DNS Spoofing
- Session Hijacking
- Denial of Service
- Phishing
- Question 6
- Confidentiality, authentication, and availability
- Confidentiality, integrity, and authentication
- Confidentiality, integrity, and availability
- Integrity, availability, and privacy
- Question 7
- Data-based attacks
- Logic-based attacks
- Web-based attacks
- System-based attacks
- Question 8
- To improve cybersecurity posture
- To classify different types of cybercrimes
- To implement malicious code
- To organize cyber-attacks
- Question 9
- Exploitation of computer systems and networks using malicious code
- Alteration of computer code, logic, or data using authorized means
- Exploitation of computer systems and networks using ethical hacking techniques
- Use of non-malicious code to enhance computer logic
- Question 10
- Accessible to authorized entities, protected from unauthorized change, and available at all times
- Hidden from unauthorized access, unprotected from unauthorized change, and available at all times
- Accessible to all users, protected from unauthorized change, and available at all times
- Hidden from unauthorized access, protected from unauthorized change, and available only when needed
List of Flashcards10 flashcards
- Card 1HintThink of overwhelming a system so it can't serve anyone.Memory TipDoS: Deny Other Services
- Card 2HintImagine someone listening in and altering a conversation between two people.Memory TipMitM: Middle Man Intercepts
- Card 3HintIt's like trying every word in a book to unlock something.Memory TipDictionary: Word list guesser
- Card 4HintThink of tricking a system into going to the wrong address.Memory TipDNS Spoof: Fake address
- Card 5HintIt's like fishing for personal information with a deceptive bait.Memory TipPhishing: Fake emails for info
- Card 6HintWhat three core aspects does NIST aim to secure for information?Memory TipNIST's CIA: Confidentiality, Integrity, Availability
- Card 7HintThese attacks specifically target applications accessible via a browser.Memory TipWeb: Attacking websites
- Card 8HintWhat is the main outcome NIST aims for in an organization's security?Memory TipNIST: Improve security stance
- Card 9HintWhat is the defining action that makes an attack 'cyber'?Memory TipCyber-attack: Malicious code exploit
- Card 10HintWhat three conditions must be met for information to be considered truly secure by NIST?Memory TipNIST info: Hidden, Protected, Available