NISTNIST CSFProtect FunctionEASYFree question
What is the Access Control category (PR.AC) within the CSF 1.1 Protect function focused on?
- A.Encrypting sensitive files at rest, and rotating cryptographic keys on a fixed retention schedule
- B.Cataloging hardware and software assets, and mapping their configurations for the inventory
- C.Testing backup restoration procedures, and validating recovery time objectives each quarter
- D.Limiting access to assets and associated facilities to authorized users, processes, and devices
Why D is correct
Access Control (PR.AC) focuses on managing access to assets and associated facilities, ensuring that only authorized users, processes, and devices can access systems and data.
Know someone studying for NIST CSF? Send them this one.