Designing, Deploying, and Managing Security Controls CCISO Practice Questions (Page 10)

Questions 46–50

1. 46expert · hard

   A financial services firm is designing a defense-in-depth strategy for its customer-facing web application. The CISO wants to ensure that a single control failure does not lead to a data breach. Which combination of controls best achieves this objective?

   • AA single strong authentication mechanism and a firewall
   • BNetwork monitoring and log analysis only
   • CWeb application firewall, network segmentation, application-level authentication, and database encryption
   • DPhysical security controls for the data center only
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A manufacturing company is deploying a new network segmentation control to isolate its OT (operational technology) network from the IT network. The deployment must not interrupt production. Which deployment strategy is most appropriate?

   • ADeploy the segmentation only after all OT devices are replaced
   • BDeploy the segmentation in a maintenance window with a rollback plan and staged implementation
   • CDeploy the segmentation without a rollback plan to avoid complexity
   • DDeploy the segmentation during peak production hours to test under load
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   When aligning security controls with regulatory requirements, what is the first step an organization should take?

   • AIdentify the applicable regulations and their specific control requirements
   • BWait for an audit to identify gaps
   • CPurchase the most expensive security software
   • DImmediately decommission all existing controls
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   A CISO is evaluating the effectiveness of a new endpoint detection and response (EDR) solution. The vendor claims a 99% detection rate, but the organization has seen several false positives that overwhelmed the security team. Which approach provides the most balanced assessment of the EDR's effectiveness?

   • ADisable the EDR because false positives are too disruptive
   • BMeasure both the detection rate and the false positive rate, and compare them against the organization's tolerance for alerts
   • CRely solely on the vendor's detection rate claim
   • DMeasure only the number of alerts generated per day
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company is implementing a new access control system for its data center. The security team wants to ensure that only authorized personnel can enter the server room, and that access is logged. Which set of controls best meets this requirement?

   • AA keypad lock with a shared code and an alarm system.
   • BA biometric scanner at the door and a security camera recording all entries.
   • CA policy requiring all visitors to be escorted and a logbook for visitors.
   • DA sign-in sheet at the front desk and a security guard.
   Reveal Solution Discussion Select an answer first