Question 1

Under which version of the CSF did the framework go industry agnostic and HIPAA became its own regulatory factor?

Options :

A : v9.2

B : v9.3

C : v9.0

D : v9.4

E : v9.1

Answer: C

Question 2

The HITRUST CSF applies to covered information in all forms (words, numbers, pictures, sounds).

Options :

A : True

B : False

Answer: A

Question 3

Who defines the scope of an assessment?

Options :

A : Client Management

B : The Assessor

C : HITRUST

Answer: A

Question 4

Management has asked you to scope out an assessment including your entire network. What are some examples you may see listed as a primary scoping component?

Options :

A : Hypervisor

B : Server

C : Oracle database

D : Smoke detectors

E : Network attached storage device

Answer: A,B,C,E

Question 5

For the External Assessor QA process, the individual who acts as the Quality Assurance Reviewer for an assessor organization can also be the Engagement Executive.

Options :

A : True

B : False

Answer: B