The Role of the CISO ACCISO Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which role is primarily responsible for designing the technical security architecture, such as network segmentation and identity management frameworks?

   • ASecurity architect
   • BSecurity manager
   • CCISO
   • DSecurity engineer
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a common advantage of a CISO reporting directly to the CEO?

   • AIt gives the CISO more authority to enforce security policies across the organization.
   • BIt limits the CISO's focus to technical security issues only.
   • CIt removes the need for the CISO to communicate with other executives.
   • DIt ensures the CISO has no direct access to the board of directors.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the CISO's primary duty regarding regulatory compliance?

   • ATo create new regulations for the industry
   • BTo personally sign off on all financial audits
   • CTo avoid all compliance audits
   • DTo ensure the organization meets applicable legal and regulatory security requirements
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A retail company's CISO must propose a security strategy for the next fiscal year. The company is expanding into e-commerce and expects to handle customer payment data. The board has limited budget and wants to see a clear link between security investments and business growth. Which approach best aligns the security strategy with business objectives?

   • AInvest in a comprehensive security program that covers all possible threats equally
   • BFocus the strategy on protecting the e-commerce platform and payment data, and communicate the resulting revenue protection
   • CDelay security investments until after the e-commerce platform is launched
   • DRequest a budget increase without explaining the business impact
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A CISO is preparing the security budget for the next fiscal year. The company is facing a potential economic downturn, and the CFO has asked for a 15% reduction in all departmental budgets. The CISO must decide where to make cuts without significantly increasing the organization's risk. Which approach is most aligned with the CISO's budgeting and risk management responsibilities?

   • AReduce the security team's training budget to the minimum required by compliance.
   • BCut the budget for incident response retainer services because they are only used during emergencies.
   • CReduce spending on low-priority initiatives, such as optional security awareness swag, and negotiate better pricing on existing security tools.
   • DDelay all security projects for the year and use the budget only for operational expenses.
   Reveal Solution Discussion Select an answer first