Designing, Deploying, and Managing Security Controls ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company is deploying a new security control to protect its customer database. The control is complex and may require significant configuration. The security team wants to minimize the risk of misconfiguration while ensuring that the control is effective. What is the best deployment strategy?

   • ADeploy the control to production all at once to ensure immediate protection.
   • BDeploy the control in a test environment first, then roll it out to production in phases.
   • CDeploy the control directly to production and configure it based on the vendor's default settings.
   • DDeploy the control only to a subset of the database servers and leave the rest unprotected.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company's intrusion detection system (IDS) generates thousands of alerts per day, but most are false positives. The security team is overwhelmed and may miss real threats. What is the most effective way to improve the control's effectiveness?

   • ADisable the IDS and rely on manual log reviews.
   • BIncrease the number of security analysts to review all alerts manually.
   • CIncrease the sensitivity of the IDS to catch more potential threats.
   • DTune the IDS detection rules to reduce false positives and implement a triage process to prioritize alerts.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A manufacturing company has implemented a new firewall rule set. After three months, the security team notices that some rules are no longer used and that the firewall's performance has degraded. What should the security team do as part of the control management lifecycle?

   • AReplace the firewall with a newer model to improve performance.
   • BLeave the rules in place to avoid breaking any existing connections.
   • CReview the firewall rules, remove unused rules, and update the rule set to reflect current network requirements.
   • DDisable the firewall temporarily to see if performance improves.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A multinational corporation is deploying a new data classification and protection tool. The tool will be deployed across all regions, but the company must comply with data residency laws that require personal data to remain within specific geographic boundaries. The security team has limited resources and wants to minimize disruption. Which deployment strategy is most appropriate?

   • ADeploy the tool only in regions where data residency laws are not a concern.
   • BDeploy the tool in phases, starting with regions that have the most stringent data residency requirements.
   • CDeploy the tool globally at once, but configure it to tag data with its region of origin.
   • DDeploy the tool to a single region and use it to process data from all other regions.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A cloud-based SaaS company is designing security controls for its multi-tenant environment. The CISO wants to ensure that if one tenant's data is compromised, the other tenants are not affected. Which design principle is most important to apply?

   • AImplement a strong password policy for all tenant users.
   • BApply least privilege to all tenant administrators to limit their access.
   • CImplement strong tenant isolation using separate virtual networks and encryption keys.
   • DUse a single shared database for all tenants to simplify management.
   Reveal Solution Discussion Select an answer first