Information Security Projects ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following best illustrates the application of the 'cost' principle in an information security project?

   • AEstimating the budget required for security tools and personnel
   • BScheduling penetration tests to occur before the go-live date
   • CDefining the specific security controls to be implemented
   • DEnsuring the security solution meets regulatory requirements
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A security project to replace a legacy SIEM is in the planning phase. The project team has identified that the legacy SIEM contains years of historical log data that must be migrated for compliance. The migration is complex and could delay the project. What is the best way to handle this in the project plan?

   • AInclude the data migration as a separate workstream with its own timeline and risk assessment.
   • BDelay the entire project until the data migration is fully understood.
   • CExclude the historical data from the project scope and archive it without migration.
   • DMigrate the data in parallel with the main implementation without additional planning.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   During the planning of a firewall upgrade, the security team identifies that the new firewall model has a known compatibility issue with the existing VPN concentrator. What is the most appropriate risk response?

   • AMitigate by scheduling a lab test of the firewall and VPN integration before the production cutover.
   • BTransfer the risk by purchasing extended warranty from the firewall vendor.
   • CAccept the risk and proceed with the upgrade without further action.
   • DAvoid the risk by canceling the firewall upgrade entirely.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A security project to migrate to a new cloud access security broker (CASB) is underway. The project has a tight deadline because the current CASB contract expires soon. During testing, the team discovers that the new CASB does not support a legacy authentication protocol used by a few critical applications. The vendor says a workaround is possible but will require additional development and testing. What should the project manager do?

   • AImplement the workaround immediately without changing the project baseline to meet the deadline.
   • BProceed with the workaround and extend the project timeline, accepting the risk of a temporary gap in coverage.
   • CStop the migration and renew the current CASB contract to avoid the compatibility issue.
   • DAssess the risk of the legacy protocol gap, evaluate the workaround's cost and schedule impact, and present options to the steering committee.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary goal of stakeholder engagement in a security project?

   • ATo ensure all stakeholders have the same level of technical knowledge
   • BTo provide stakeholders with full access to all project data
   • CTo manage expectations and gain support for the project
   • DTo eliminate all stakeholder concerns
   Reveal Solution Discussion Select an answer first