The Role of the CISO ACCISO Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A newly appointed CISO is reviewing the security team's responsibilities. The security manager is focused on daily operations, the security architect is designing a zero-trust network, and the security engineer is implementing firewall rules. Which activity is most clearly the CISO's responsibility in this context?

   • AMonitoring the daily alert queue for the new intrusion-detection system
   • BConfiguring the firewall rule set for the new network segmentation
   • CApproving the exception to the access-control policy that the zero-trust design requires
   • DDrafting the technical specification for the zero-trust architecture
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is hiring a new CISO. The current security team is strong in technical skills but lacks experience in communicating with the board and aligning security with business goals. Which competency should the hiring committee prioritize for the new CISO?

   • AExperience as a security architect designing network segmentation.
   • BCertification in forensic investigation and incident response.
   • CDeep expertise in penetration testing and malware analysis.
   • DStrong leadership and communication skills, with the ability to translate security issues into business risk.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the first step a CISO should take when developing a security strategy?

   • ASelecting specific security products and vendors
   • BHiring a large security team
   • CConducting a penetration test on all systems
   • DUnderstanding the organization's business objectives and risk appetite
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has experienced several phishing incidents despite technical email filters. The CISO wants to reduce the likelihood of successful phishing. Which initiative best reflects the CISO's role in fostering a security-aware culture?

   • ADeploying a more advanced email filtering solution
   • BImplementing a simulated phishing program with targeted training
   • CPublishing a one-time security newsletter
   • DDisabling email for all employees
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A CISO is reviewing the organization's security strategy and notices that the company is adopting cloud-based services rapidly. The CISO wants to ensure the security program keeps pace with emerging technologies. Which action best demonstrates the CISO's responsibility to stay current with emerging trends?

   • AImmediately adopt every new security technology that is released to stay ahead of threats.
   • BWait for the cloud provider to inform the organization of any security issues before taking action.
   • CFocus only on traditional on-premises security controls and ignore cloud-specific threats.
   • DEstablish a process to continuously monitor emerging threats and technologies, and assess their impact on the organization's risk posture.
   Reveal Solution Discussion Select an answer first