Designing, Deploying, and Managing Security Controls CCISO Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A healthcare organization is implementing a new access control system. The project manager wants to minimize disruption to clinical operations while ensuring that the new system is tested and rolled out safely. Which deployment approach best meets these requirements?

   • ADeploying the new system in parallel with the old system for all users, then switching over after one week
   • BPhased rollout starting with a non-clinical department, then expanding to clinical areas after validation
   • CBig-bang deployment across all departments simultaneously to complete the project quickly
   • DPilot deployment only in the IT department, then immediately rolling out to all clinical areas without further testing
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which method is commonly used to evaluate the effectiveness of a security control?

   • AReviewing the control's purchase price
   • BReading the control's user manual
   • CAsking users if they like the control
   • DPenetration testing
   Reveal Solution Discussion Select an answer first
4. 33expert · hard · select all that apply

   A CISO is evaluating the effectiveness of a new data encryption control for data at rest. Which of the following methods would provide meaningful evidence of the control's effectiveness? (Select all that apply.)

   • AConfirming that the encryption keys are stored securely and access is logged.
   • BChecking that encryption is enabled on all relevant storage locations.
   • CReviewing the encryption algorithm and key length used.
   • DAsking the storage administrator if encryption is working.
   • EAttempting to read encrypted files without the decryption key.
   Check answers Discussion Select an answer first
5. 34application · medium

   A security team is managing a firewall that has been in place for several years. The team has noticed that the firewall's rule base has grown complex and contains many unused rules. What is the best course of action to maintain the control's effectiveness?

   • ADisable logging for the firewall to reduce noise and improve performance.
   • BReplace the firewall with a next-generation firewall to automatically manage rules.
   • CConduct a rule review, remove unused rules, and document the changes.
   • DLeave the rules in place to avoid breaking any existing functionality.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   An organization deploys an intrusion detection system (IDS) that monitors network traffic and generates alerts when suspicious activity is detected. This control is best classified as:

   • ACompensating
   • BPreventive
   • CCorrective
   • DDetective
   Reveal Solution Discussion Select an answer first