The Role of the CISO ACCISO Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A CISO has a limited security budget and must choose between two initiatives: upgrading the endpoint detection and response (EDR) solution or implementing a data loss prevention (DLP) program. The company's top risks are ransomware and insider data theft. Which approach best reflects the CISO's budgeting and risk management responsibilities?

   • ADefer the decision to the security team leads
   • BSplit the budget equally between both initiatives
   • CChoose the initiative that addresses the higher-likelihood risk based on the company's threat profile
   • DChoose the EDR upgrade because it is more technical
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which step is part of the CISO's responsibility in the risk assessment process?

   • AEliminating all risks to the organization
   • BDelegating all risk decisions to external auditors
   • CPurchasing cyber insurance to cover all potential losses
   • DIdentifying and prioritizing information assets and their associated threats
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   When communicating with the board of directors, what is the most effective way for a CISO to present security risks?

   • APresenting only the technical details of each vulnerability
   • BUsing highly technical jargon to demonstrate expertise
   • CAvoiding discussion of risks to prevent panic
   • DFocusing on the probability and impact in business terms, such as financial loss
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which communication method is most effective for a CISO to reinforce security awareness across the organization?

   • AKeeping security information confidential to avoid alarming employees
   • BSending a single annual email about security policies
   • CPosting security posters in the break room only
   • DUsing a mix of regular training, simulated phishing, and leadership messages
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A large organization has just experienced a significant data breach. The CISO is leading the post-incident review. The security team has identified that the breach occurred due to a misconfigured firewall that was not detected by existing monitoring tools. The CISO must decide on the most effective follow-up action to prevent recurrence. Which action is most aligned with the CISO's role in incident response and continuous improvement?

   • AImplement a configuration management process that includes regular audits of firewall rules and automated alerts for unauthorized changes.
   • BIncrease the frequency of penetration tests to once a month.
   • CFire the security engineer responsible for the firewall configuration to demonstrate accountability.
   • DPurchase a new firewall product from a different vendor to replace the current one.
   Reveal Solution Discussion Select an answer first