Skip to content

FRM Part II · FRM Exam Part II · Cyber-resilience: Range of Practices

A regional bank classifies its cyber defences into functions. Its security team installs firewalls and multi-factor authentication, runs a security operations centre that monitors for anomalies, and maintains tested backups with a rehearsed restoration plan. Which sequence of functions do these three activities represent, respectively?

The activities map to protect, detect and recover. Firewalls and multi-factor authentication safeguard systems, a security operations centre monitoring for anomalies detects events, and tested backups with restoration plans enable recovery. Response and identification involve different activities such as incident handling and asset mapping.

  1. AProtect, detect, recoverCorrect
  2. BIdentify, respond, recover
  3. CDetect, protect, respond
  4. DProtect, respond, identify

Explanation

Firewalls and MFA are preventive safeguards (protect). A monitoring centre looking for anomalies is detection. Tested backups with a restoration plan support recovery. Other options mislabel monitoring as response or identification.

Did you get it right without looking?

One question tells you little. A timed set on Cyber-resilience: Range of Practices shows your real accuracy, how long you take and where you lose marks.

Practise Cyber-resilience: Range of PracticesFree diagnostic mock

More Cyber-resilience: Range of Practices questions