NISTNIST CSFProtect FunctionEASYFree question
How does encryption contribute to the Protect function?
- A.Awareness training reduces phishing susceptibility by teaching staff to recognize suspicious links and sender addresses (in simulated exercises), measured through click-rate trends over successive campaigns
- B.Network segmentation reduces the blast radius of a breach by isolating zones based on function and sensitivity (finance, HR, guest Wi-Fi), measured through lateral-movement exercises
- C.Patch management reduces exploitable vulnerabilities by closing known flaws on a defined schedule (critical fixes within days), and its effectiveness is measured through mean time to remediate
- D.Encryption protects data confidentiality by rendering it unreadable without the proper key, applicable to data at rest (stored), in transit (network), and in use (processing)
Why D is correct
Encryption is a fundamental data protection control that ensures confidentiality across all data states. It is essential for protecting sensitive data from unauthorized disclosure.
Know someone studying for NIST CSF? Send them this one.