Information Security Projects CCISO Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is the main purpose of project monitoring and control in an information security project?

   • ATo close out the project and archive documents
   • BTo define the project's objectives and stakeholders
   • CTo execute the project tasks
   • DTo track progress and performance against the plan and take corrective action when needed
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which element is typically included in a project communication plan?

   • ACommunication channels and frequency
   • BThe project's procurement strategy
   • CThe project's quality metrics
   • DThe project's risk register
   Reveal Solution Discussion Select an answer first
4. 48expert · hard

   A security awareness program project has a goal to reduce phishing click rates. The project manager needs to define KPIs to measure success. Which KPI is MOST aligned with the project's objective?

   • ANumber of employees who completed the training
   • BNumber of phishing emails reported by employees
   • CPercentage decrease in phishing click rate over the project period
   • DNumber of training sessions conducted
   Reveal Solution Discussion Select an answer first
5. 49expert · hard

   Midway through a security awareness project, the compliance team requests a new module on insider threat detection. This addition will increase the project scope by 20% and require additional resources. The project sponsor is concerned about the impact on the deadline. What is the MOST appropriate change management action?

   • AImmediately add the new module to the project plan to satisfy the compliance team's request.
   • BReject the change because it was not part of the original project scope.
   • CAsk the compliance team to fund the additional resources without going through the change control process.
   • DEvaluate the impact of the change on scope, schedule, and budget, and present a formal change request to the change control board for approval.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   What is the purpose of using project management tools in an information security project?

   • ATo replace the need for a project manager
   • BTo automate all security controls
   • CTo eliminate the need for stakeholder communication
   • DTo facilitate planning, tracking, and reporting of project activities
   Reveal Solution Discussion Select an answer first