200-201 Security Concepts Practice Question
Which NIST Cybersecurity Framework function involves developing and implementing appropriate safeguards to ensure delivery of critical infrastructure services?
⚠ Common exam trap
200-201 often tests the boundaries between CSF functions — candidates must distinguish Protect (safeguards) from Detect (monitoring) and Identify (asset and risk understanding), since all three sound related but address different phases.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Protect
The Protect function of the NIST Cybersecurity Framework involves developing and implementing appropriate safeguards to ensure delivery of critical infrastructure services. It covers access control, awareness training, data security, protective technology, and maintenance. This function limits or contains the impact of a potential cybersecurity event.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Respond
Why it's wrong here
Respond covers containment, mitigation and recovery actions taken after an incident is detected. It is tempting because responding involves action, but the stem describes proactive safeguards implemented before an event, which is the Protect function.
- ✗
Detect
Why it's wrong here
Detect covers monitoring and anomaly identification, not deploying safeguards. It is tempting because detection tooling often accompanies protective controls, yet the stem describes the Protect function: implementing safeguards that limit or deter cybersecurity events and ensure service delivery.
- ✗
Identify
Why it's wrong here
Identify covers asset management, risk assessment and governance understanding, not implementing safeguards. It is tempting because knowing assets precedes protecting them, but the stem's wording — developing and implementing safeguards — maps to Protect, not Identify.
- ✓
Protect
Why this is correct
The Protect function covers safeguards that limit or contain the impact of a cybersecurity event, including access control, awareness training, data security and protective technology. Developing and implementing these safeguards to ensure delivery of critical infrastructure services is its stated purpose.
Go deeper
Related to this question
About these practice questions
One of 968 original 200-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.