Information Security Projects CCISO Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   During the execution of a security awareness training project, the project manager notices that the training completion rate is only 60% halfway through the planned timeline. Several business units have not scheduled their employees for training. What should the project manager do to keep the project on track?

   • AReduce the training content to make it shorter and easier to complete
   • BEscalate the issue to the project sponsor and adjust the training schedule with business unit managers
   • CMark the training as complete for all employees to meet the deadline
   • DExtend the project timeline without informing stakeholders
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   A security project to deploy a new endpoint detection and response (EDR) tool is nearing completion. The security operations center (SOC) will monitor the tool. The SOC team has not been involved in the project. What is the BEST way to ensure operational readiness?

   • AHave the project team continue to monitor the EDR tool after closure
   • BProvide the SOC team with access to the EDR console without training
   • CDefer the handover until after the project is closed
   • DConduct a formal handover with training and documentation for the SOC team
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   Which technique is commonly used to visualize project tasks and dependencies?

   • AVulnerability scan
   • BGantt chart
   • CPenetration test
   • DFirewall rule review
   Reveal Solution Discussion Select an answer first
5. 54foundation · easy

   Why is it important to integrate an information security project with ongoing security operations?

   • ATo eliminate the need for project documentation
   • BTo transfer all security responsibilities to the project team permanently
   • CTo reduce the need for security monitoring
   • DTo ensure a seamless transition and operational readiness of new capabilities
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   What is the purpose of a service level agreement (SLA) in a vendor contract for a security project?

   • ATo transfer all project risks to the vendor
   • BTo guarantee the project will be completed on time
   • CTo define the expected performance and response times from the vendor
   • DTo eliminate the need for vendor management
   Reveal Solution Discussion Select an answer first