Program Management CAS-005 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team needs to produce a monthly report for management that includes incident metrics and compliance status. The team has multiple data sources, including SIEM, vulnerability scanner, and training records. The report must be accurate and produced with minimal manual effort. Which approach is most effective?

   • AUse a business intelligence tool that requires significant customization for each data source.
   • BManually compile data from each source into a spreadsheet each month.
   • CAsk each team to submit their own report and combine them into a single document.
   • DIntegrate the data sources into a reporting tool that automatically generates the report with predefined templates and scheduled delivery.
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   Which of the following is an essential component of a comprehensive security training curriculum?

   • AA single generic module for all employees regardless of role
   • BFocus exclusively on physical security measures
   • CRole-based modules tailored to specific job functions
   • DTraining that is only delivered once per year
   Reveal Solution Discussion Select an answer first
4. 18foundation · medium

   What is the primary reason for providing privacy training to employees?

   • ATo teach employees how to market products more effectively
   • BTo ensure employees understand how to handle personal data in compliance with regulations
   • CTo train employees on how to use social media for business
   • DTo help employees bypass data protection laws when necessary
   Reveal Solution Discussion Select an answer first
5. 19foundation · medium

   Which of the following is a key element of an effective security report?

   • AA list of all employee passwords
   • BClear metrics and key performance indicators (KPIs)
   • CVague descriptions without specific data
   • DOnly positive news to keep morale high
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is implementing a new data classification policy. The security team needs to communicate the policy to all employees and ensure they understand their responsibilities. The company has a diverse workforce, including remote and field employees. Which communication strategy is most effective?

   • ALaunch a multi-channel campaign with a short video, an FAQ page, and a live Q&A session, followed by a mandatory quiz.
   • BSend a single email to all employees with the policy attached and require a read receipt.
   • CHold a single town hall meeting and record it for those who cannot attend.
   • DPost the policy on the company intranet and rely on employees to read it.
   Reveal Solution Discussion Select an answer first