A security project is implementing a new data classification policy. The legal department has expressed concerns about compliance with data protection regulations. What is the best way to manage this stakeholder?

Schedule a one-on-one meeting with legal counsel to understand their concerns and incorporate their input into the policy design.

Ask the project sponsor to override legal's concerns.

Proceed with the policy and inform legal after implementation.

Exclude legal from the project because they are not part of the security team.

A security project is migrating from an on-premises SIEM to a cloud-based SIEM. The project has a tight deadline and a limited budget. During planning, the team identifies a risk that the cloud SIEM may not integrate with a legacy log source, which could delay the migration. The team also knows that the legacy system is scheduled to be decommissioned in six months. What is the most appropriate risk response?

Avoid the risk by delaying the cloud SIEM migration until the legacy system is decommissioned.

Accept the risk and proceed, planning to manually review logs from the legacy source until it is decommissioned.

Transfer the risk by purchasing additional support from the cloud SIEM vendor.

Mitigate the risk by building a custom log collector for the legacy source.

A security project has completed the deployment of a new SIEM platform. The project team is preparing to close the project. What is the most important activity to ensure continuity of security operations?

Celebrate the project completion with the team and stakeholders.

Archive all project documents and dissolve the project team immediately.

Schedule a post-implementation review to assess project success.

Conduct a formal handover to the security operations center (SOC) with documented runbooks and training.

A security manager is developing a project plan for a network segmentation initiative. The organization has a limited security team and a tight budget. Which element of the project plan is most important to include to address the resource constraint?

A detailed procurement plan for purchasing new network hardware.

A resource management plan that identifies required skills, availability, and training needs.

A communication plan that lists all project stakeholders.

A quality management plan that defines acceptance criteria.

A security project to deploy a new patch management system is nearing completion. The project manager wants to measure whether the system is actually reducing the organization's exposure to known vulnerabilities. Which KPI is most appropriate?

Number of patches deployed per month.

Mean time to remediate (MTTR) critical vulnerabilities across the environment.

Percentage of systems that have the latest patch management agent installed.

Total cost of the patch management software.

EC-CouncilAssociate C|CISO

Domain 3Objective 2

Information Security Projects ACCISO Practice Questions (Page 11)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

9concepts

Questions 51–55

51application · medium
A security project is implementing a new data classification policy. The legal department has expressed concerns about compliance with data protection regulations. What is the best way to manage this stakeholder?
Select an answer first
52expert · hard
A security project is migrating from an on-premises SIEM to a cloud-based SIEM. The project has a tight deadline and a limited budget. During planning, the team identifies a risk that the cloud SIEM may not integrate with a legacy log source, which could delay the migration. The team also knows that the legacy system is scheduled to be decommissioned in six months. What is the most appropriate risk response?
Select an answer first
53application · medium
A security project has completed the deployment of a new SIEM platform. The project team is preparing to close the project. What is the most important activity to ensure continuity of security operations?
Select an answer first
54application · medium
A security manager is developing a project plan for a network segmentation initiative. The organization has a limited security team and a tight budget. Which element of the project plan is most important to include to address the resource constraint?
Select an answer first
55application · medium
A security project to deploy a new patch management system is nearing completion. The project manager wants to measure whether the system is actually reducing the organization's exposure to known vulnerabilities. Which KPI is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.