100% Free AKYLADE CRF-002 Practice Test Questions

Question 1

In the context of quantitative risk assessment, what does the ARO measure?

A : The maximum potential loss from a single occurrence of a threat or event

B : The effectiveness of security measures implemented to reduce incidents and events

C : The total number of incidents that have occurred over a specific period, such as a week, month, or year

D : The estimated frequency at which a specific threat is expected to occur within a year

Answer: D

Question 2

What is the benefit of comparing an organization's current profile against its target profile?

A : To determine the return on investment for the information technology and cybersecurity department budgets

B : To fulfill the organization's mandatory reporting requirements to regulatory agencies and legal bodies

C : To identify discrepancies between current practices and desired outcomes, guiding focused improvements

D : To evaluate the performance of the cybersecurity tools currently in use within the organization

Answer: C

Question 3

An aeronautical engineering firm works primarily with the Department of Defense and relies heavily upon semiconductors that are manufactured outside the United States. They are concerned about the risk or attack surface associated with foreign made semiconductors. Which of the following subcategories in the NIST Cybersecurity Framework covers the firm’s concern?

A : Asset Management

B : Risk Assessment

C : Data Security

D : Cybersecurity Supply Chain Risk Management

Answer: D

Question 4

An aeronautical engineering firm works primarily with the Department of Defense and relies heavily upon semiconductors that are manufactured outside the United States. They are concerned about the risk or attack surface associated with foreign made semiconductors. Which of the following subcategories in the NIST Cybersecurity Framework covers the firm’s concern?

A : Asset Management

B : Risk Assessment

C : Data Security

D : Cybersecurity Supply Chain Risk Management

Answer: D

Question 5

Which of the following best describes the purpose of the Asset Management (ID.AM) category?

A : To audit and assess the efficiency of an organization's cybersecurity measures

B : To provide financial resources for proposed cybersecurity improvements

C : To identify and manage all assets that support organizational objectives

D : To implement technical controls and defenses for digital and physical assets

Answer: C

Free Practice AKYLADE CRF-002 Exam Questions 2025