Information Security Projects ACCISO Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   After a security project implements a new data loss prevention (DLP) solution, the operations team reports that they are receiving too many false-positive alerts. What is the most appropriate action to ensure the solution remains effective in operations?

   • AEscalate the issue to the project sponsor and close the project.
   • BDisable the DLP solution until the false positives are resolved.
   • CTune the DLP policies in collaboration with the operations team and update the operational runbooks.
   • DIncrease the alert threshold to reduce all alerts, including true positives.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A large enterprise is implementing a new identity and access management (IAM) system. The project affects multiple business units, and the CIO has asked for regular updates. Which governance structure best ensures alignment with organizational strategy and stakeholder support?

   • AAssign a single project manager to make all decisions independently.
   • BCreate a detailed project plan and share it only with the CIO.
   • CEstablish a steering committee with representatives from affected business units and IT leadership.
   • DDelegate all decisions to the vendor implementing the IAM system.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the primary purpose of a project closure handover in the context of security project integration with operations?

   • ATo terminate all security monitoring activities
   • BTo ensure security controls are transitioned to operational ownership and maintained
   • CTo delete all project documentation
   • DTo release all project team members immediately
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   During a security awareness training project, the project manager learns that the marketing department is planning a product launch on the same date as the training rollout. The marketing team is a key stakeholder but has not been engaged. What is the best way to manage this stakeholder conflict?

   • AEscalate the conflict to the steering committee without consulting marketing.
   • BEngage the marketing stakeholder to understand their launch plans and negotiate a mutually acceptable training schedule.
   • CCancel the training rollout to avoid interfering with the product launch.
   • DProceed with the training rollout as planned and let marketing adjust their launch.
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   A security project to deploy a new endpoint protection platform is in its final phase. The project team has completed the rollout, but the operations team has not yet been trained on the new platform's alert handling. The project sponsor wants to close the project to free up resources. What is the best course of action?

   • AClose the project and hire external consultants to handle alerts temporarily.
   • BClose the project and let the operations team learn the platform on the job.
   • CDelay project closure until the operations team is trained and the handover is complete.
   • DClose the project but document the training as a known issue for the operations team to address later.
   Reveal Solution Discussion Select an answer first