Information Security Projects ACCISO Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company is implementing a new SIEM platform. During planning, the security team identifies that the log sources from a recently acquired subsidiary are not fully documented, which could delay integration. The project manager needs to incorporate this into the project plan. Which action is most appropriate?

   • ARemove the subsidiary from the SIEM scope to avoid the risk.
   • BAssume the subsidiary's logs are similar to the parent company's and proceed with the original schedule.
   • CAdd a risk register entry with a mitigation plan to inventory the subsidiary's log sources early in the project.
   • DDelay the entire project until the subsidiary's logs are fully documented.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security project has implemented a new identity governance and administration (IGA) system. The project is closing, but the operations team has not yet been trained on the new certification review processes. The steering committee wants to close the project on time. What is the best course of action?

   • AClose the project on time and have the operations team learn the new processes on the job.
   • BExtend the project timeline to include training and a formal handover to operations.
   • CClose the project and create a separate operational project to handle training later.
   • DAsk the vendor to provide training after the project closes at no additional cost.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security project to deploy endpoint detection and response (EDR) is in its execution phase. The project manager receives a change request from a business unit to add coverage for a legacy operating system that was not in the original scope. The change will add two weeks to the schedule and require additional testing. What is the most appropriate first action for the project manager?

   • AAssess the impact on scope, schedule, cost, and quality, then submit the change to the change control board.
   • BAdd the legacy OS coverage to the project plan and inform the sponsor after implementation.
   • CApprove the change immediately because it improves security coverage.
   • DReject the change because it was not in the original scope.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security project to deploy endpoint detection and response (EDR) is in the execution phase. The project manager wants to ensure that the rollout stays on schedule and that any deviations are caught early. Which activity is most appropriate for this phase?

   • AFinalize the project charter and obtain formal sign-off from the sponsor.
   • BDevelop a detailed work breakdown structure (WBS) for the remaining tasks.
   • CPerform a lessons-learned review and archive project documents.
   • DConduct weekly status meetings and compare actual progress against the baseline schedule.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A global company is implementing a new data classification scheme. The project has two major stakeholder groups: the legal/compliance team, which wants strict controls and a longer rollout to ensure accuracy, and the sales team, which wants a fast rollout to avoid disruption to client-facing activities. The project manager must balance these conflicting interests. Which approach is most effective?

   • APrioritize the legal/compliance team's requirements because they are more critical to the project's success.
   • BFacilitate a negotiation between the stakeholder groups to find a phased rollout that meets compliance needs and minimizes sales disruption.
   • CEscalate the conflict to the steering committee and let them decide without further stakeholder input.
   • DPrioritize the sales team's timeline to maintain business operations and address compliance concerns later.
   Reveal Solution Discussion Select an answer first