Designing, Deploying, and Managing Security Controls ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company has implemented a security control that blocks all USB devices on employee workstations. The control is effective in preventing data exfiltration, but it has also blocked legitimate USB devices needed for presentations and other business tasks. The company wants to maintain security while allowing necessary USB use. What is the best approach?

   • AAllow all USB devices but encrypt all data on the workstations.
   • BImplement a USB device control policy that allows specific approved devices based on business need, and monitor usage.
   • CKeep the USB blocking control as is and tell employees to use cloud storage for presentations.
   • DRemove the USB blocking control entirely to allow all USB devices.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A government agency has a security control that requires all employees to change their passwords every 30 days. The control is compliant with policy, but it has led to employees writing down passwords and an increase in help desk calls for password resets. The agency wants to maintain security while reducing these issues. What is the best approach?

   • ARemove the password change requirement entirely and rely on single sign-on.
   • BIncrease the password change frequency to every 15 days to improve security.
   • CEvaluate the effectiveness of the current password policy and consider implementing multi-factor authentication to allow for longer password intervals.
   • DKeep the 30-day password change policy and provide additional training to employees.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An e-commerce company is implementing a new payment processing system. The security team wants to ensure that customer payment data is protected even if the web server is compromised. The team also wants to deploy the system in a way that allows for testing before full production. Which approach best meets these requirements?

   • AEncrypt payment data only in transit, and deploy the system in a staging environment.
   • BUse a single encryption key for all data, and deploy the system to production immediately.
   • CEncrypt payment data at rest and in transit, and deploy the system in a staging environment before production.
   • DStore payment data in plaintext to simplify processing, and deploy directly to production.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A bank has implemented a new security information and event management (SIEM) system. After three months, the security operations center (SOC) analysts are overwhelmed by the number of alerts, many of which are false positives. The CISO wants to improve the efficiency of the SOC. What should be done?

   • AHire more SOC analysts to handle the increased alert volume.
   • BTune the SIEM correlation rules and use alert deduplication to reduce noise.
   • CDisable the SIEM and rely on manual log review.
   • DIncrease the severity threshold for all alerts so only critical alerts are generated.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has implemented a new security control that requires all employees to complete annual security awareness training. After the first year, the security team wants to ensure that the training is effective and that employees are applying what they learned. What should the team do?

   • ACancel the training program to save time and money.
   • BAssume the training is effective because all employees completed it.
   • CIncrease the frequency of training to quarterly without any assessment.
   • DReview training completion rates and conduct phishing simulations to measure the effectiveness of the training.
   Reveal Solution Discussion Select an answer first