Information Security Projects ACCISO Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which technique is commonly used to track the progress of a security project against the planned schedule?

   • AEarned value management (EVM)
   • BRisk assessment
   • CPenetration testing
   • DVulnerability scanning
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security project is implementing a new endpoint detection and response (EDR) tool. Midway through the rollout, the project manager discovers that the EDR agent is causing performance issues on older endpoints, and the help desk is receiving complaints. The project is already behind schedule. What is the most appropriate control action?

   • AContinue the rollout as planned and address performance issues after the deployment is complete.
   • BUninstall the EDR agent from all endpoints and revert to the previous solution.
   • CPause the rollout, analyze the performance impact, and adjust the deployment strategy for older endpoints.
   • DEscalate the issue to the steering committee and request additional budget for new hardware.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security manager is planning a data-loss-prevention (DLP) implementation for a mid-sized financial firm. The project sponsor has approved a fixed budget and a hard deadline tied to a regulatory audit. The security team has identified that the DLP solution requires integration with legacy email systems, which could introduce scope creep. What is the most effective way to keep the project on track?

   • ADefer the legacy integration until after the audit and treat it as a separate operational task.
   • BDocument the legacy integration as an explicit out-of-scope item and require formal change control for any expansion.
   • CAdd extra buffer time to the schedule to absorb any integration work that may arise.
   • DAsk the sponsor to approve a contingency fund for unexpected integration costs.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security project to implement multi-factor authentication (MFA) is in its monitoring phase. The project manager needs to report progress to the steering committee. Which metric would be most meaningful to demonstrate the project's success?

   • ANumber of security incidents prevented by MFA.
   • BPercentage of users enrolled in MFA compared to the target population.
   • CTotal hours spent by the project team on implementation.
   • DNumber of help desk tickets related to MFA.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security project is rolling out multi-factor authentication (MFA) to all employees. The HR department is concerned about the impact on new-hire onboarding. Which stakeholder engagement strategy is most effective?

   • ASend a mass email to all employees explaining the MFA rollout schedule.
   • BInvolve HR representatives in the project planning and provide them with a dedicated communication plan.
   • CWait until the rollout begins and then address any complaints from HR.
   • DExclude HR from the project because they are not part of the IT security team.
   Reveal Solution Discussion Select an answer first