Sample Questions

NISM-IFSCA-02B: Security and Cyber Resilience in the GIFT IFSC (Advanced) Mock Test — 5 random MCQs with answers & explanations

← Back to NISM-IFSCA-02B: Security and Cyber Resilience in the GIFT IFSC (Advanced) Mock Test

These 5 questions are randomly selected (standard MCQs only, not case-based).

Q1 An organisation documents formal cyber policies applied consistently and reviews them regularly, cyber risk is a recognised part of its risk programme, and it shares intelligence with sector partners. Its NIST CSF 2.0 tier is:

A. Partial
B. Risk-Informed
C. Repeatable Correct Answer
D. Adaptive

Explanation:

Tier 3 (Repeatable) signifies formally approved, regularly reviewed organization-wide policies, structured risk management integration, and active sector intelligence sharing.

Marks: 1

Q2 Determine the framework maintained by MITRE that provides a globally accessible knowledge base of adversary tactics and techniques.

A. NIST SP 800-53
B. OWASP Top 10
C. ATT&CK Framework Correct Answer
D. ISO 27002

Explanation:

MITRE ATT&CK catalogs threat actor behaviors and techniques, providing a standardized framework for security analysts.

Marks: 1

Q3 Select the security risk is created by misconfigured kubernetes container orchestration clusters exposing unauthenticated administrative dashboards.

A. Physical server rack doors unlock.
B. Unauthorized threat actors can gain full administrative control over container deployments and execute unauthorized workloads. Correct Answer
C. Cluster performance increases.
D. Wireless network range doubles.

Explanation:

Exposed Kubernetes control panels allow attackers to compromise infrastructure, deploy crypto-miners, or steal sensitive application secrets.

Marks: 1

Q4 In cybersecurity management, the threat containment technique that uses network access control (nac) to move a compromised host automatically to an isolated remediation vlan refers to:

A. Dynamic VLAN Quarantine / Isolation Correct Answer
B. BGP Route Hijacking
C. IP Address Translation
D. DNSSEC Querying

Explanation:

Dynamic VLAN quarantine changes switch port assignments automatically, isolating compromised hosts onto restricted remediation networks.

Marks: 1

Q5 Why must financial institutions maintain a complete inventory of all third-party vendor relationships and service connections.

A. To automatically approve vendor contract renewals.
B. To reduce local network hardware costs.
C. To ensure comprehensive risk visibility and enable rapid threat assessment during vendor-related cyber security breaches. Correct Answer
D. To eliminate the need for software licenses.

Explanation:

A comprehensive vendor inventory provides complete visibility into third-party dependencies, data flows, and risk exposures.

Marks: 1

Start Mock Tests →

Explore More Mock Tests

Practice structured mock tests designed exactly like real NISM exams.

Browse All Subjects Start Free Test

Sample Questions

Q1 An organisation documents formal cyber policies applied consistently and reviews them regularly, cyber risk is a recognised part of its risk programme, and it shares intelligence with sector partners. Its NIST CSF 2.0 tier is:

Q2 Determine the framework maintained by MITRE that provides a globally accessible knowledge base of adversary tactics and techniques.

Q3 Select the security risk is created by misconfigured kubernetes container orchestration clusters exposing unauthenticated administrative dashboards.

Q4 In cybersecurity management, the threat containment technique that uses network access control (nac) to move a compromised host automatically to an isolated remediation vlan refers to:

Q5 Why must financial institutions maintain a complete inventory of all third-party vendor relationships and service connections.

Explore More Mock Tests

Notify me when you add new Sample Questions

Create a free PassNISM account