NISTNIST CSFProtect FunctionEASYFree question
Within the CSF 1.1 Core, what does the Access Control (PR.AC) category address?
- A.Managing access to assets and associated facilities, ensuring that access is limited to authorized users, processes, and devices and is managed consistent with assessed risk
- B.Monitoring network traffic for anomalies, ensuring that alerts are triaged by the operations center, and escalating confirmed incidents for further review
- C.Cataloging physical and virtual assets, and maintaining an inventory used for risk assessment and budget planning
- D.Restoring systems and data, and validating recovery time objectives once an outage has fully ended per the business impact analysis
Why A is correct
Access Control ensures only authorized entities can access resources through identity management, authentication, permissions management, and network access controls.
Know someone studying for NIST CSF? Send them this one.