NISTNIST CSFProtect FunctionEASYFree question
How does encryption contribute to the Protect function?
- A.Encryption only protects data in transit; this choice assumes that encrypting data in transit satisfies every PR.DS outcome on its own; in addition, NIST scores adopters publicly
- B.Encryption replaces the need for access controls, as least privilege is discouraged by the CSF in favor of broad standing access for productivity; on top of this, NIST licenses the CSF for a per-seat fee
- C.Encryption only prevents physical theft
- D.Encryption protects data confidentiality by rendering it unreadable without the proper key, applicable to data at rest (stored), in transit (network), and in use (processing)
Why D is correct
Encryption is a fundamental data protection control that ensures confidentiality across all data states. It is essential for protecting sensitive data from unauthorized disclosure.
Know someone studying for NIST CSF? Send them this one.