Objective 8.5
Cybersecurity Defense ArchitectDefine technology implementation strategies to provide desired capabilities
Objective 8.5 sits in Security Capability Selection, Placement, Configuration, which carries 15% of the Cybersecurity Defense Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A program pairs the CSF Core, Profiles and Tiers with the supplementary resources NIST publishes. Which set of actions do those resources support?
Correct.
Checked against nvlpubs.nist.gov, August 2026Concept
An implementation strategy needs a sequence that ends in communication. A plan nobody can explain to a budget holder does not get funded.
Why C
NIST documents that an organization can use the CSF Core, Profiles and Tiers with the supplementary resources to understand, assess, prioritize and communicate cybersecurity risks.
Source
NIST CSWP 29: The NIST Cybersecurity Framework (CSF) 2.0, checked August 2026An organization can use the CSF Core, Profiles, and Tiers with the supplementary resources to understand, assess, prioritize, and communicate cybersecurity risks.
Now you: objective 8.5 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 2
A team new to the CSF downloads an Organizational Profile Template to get started. What does that template help them do?
Sample question 2 of 2
A board approves a one-off CSF assessment and expects the risk work to close afterwards. Under the CSF, what must managing cybersecurity risk be?
Full Cybersecurity Defense Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.
More objectives in Security Capability Selection, Placement, Configuration
- 8.1 Identify organizational coverage for prevention, detection, response and recovery capabilities
- 8.2 Determine how coverage gaps can be mitigated by architecture changes, config changes, or process changes
- 8.3 Affect organizational and company priorities and budgets based on key capabilities required for security that are aligned to security and business goals
- 8.4 Explain methodologies used to select security technologies aligned to business need, organizational technology landscape, and security controls
- 8.6 Ensure that resilient solutions aligned to the business and operational requirements are selected and deployed. -