Information Security Projects CCISO Practice Questions (Page 14)

Questions 66–70

1. 66expert · hard

   After closing a security project that implemented a new firewall, the CISO wants to improve future projects. The project team documented lessons learned. What is the BEST way to ensure these lessons lead to improvement?

   • AUse the lessons learned to evaluate the project manager's performance
   • BStore the lessons learned in a repository and archive them
   • CReview lessons learned at the start of each new project and incorporate them into planning
   • DShare the lessons learned only with the project team
   Reveal Solution Discussion Select an answer first
2. 67foundation · easy

   Which of the following is a key step in initiating an information security project?

   • ADefining the project scope and objectives
   • BExecuting the project tasks
   • CConducting the post-implementation review
   • DDeveloping the detailed project schedule
   Reveal Solution Discussion Select an answer first
4. 68foundation · easy

   Which of the following is the correct sequence of phases in a typical information security project lifecycle?

   • AInitiation, Planning, Execution, Monitoring and Control, Closure
   • BInitiation, Execution, Planning, Closure, Monitoring and Control
   • CPlanning, Initiation, Execution, Closure, Monitoring and Control
   • DExecution, Planning, Initiation, Monitoring and Control, Closure
   Reveal Solution Discussion Select an answer first
5. 69application · medium

   A regional bank is initiating a project to implement a new customer authentication system that will process personal data of EU citizens. The project sponsor has asked the CISO to begin the initiation phase. The bank's legal team has confirmed that the solution must comply with GDPR data residency requirements. Which action should the CISO take FIRST during project initiation?

   • ADocument the project scope, objectives, and key stakeholders, including the EU data protection officer (DPO) as a required approver.
   • BDevelop a detailed project schedule with milestones and resource assignments for the authentication implementation.
   • CConduct a lessons-learned review from a previous failed authentication project to inform the new initiative.
   • DSelect a cloud provider that offers data centers within the EU to satisfy the residency requirement before any other planning occurs.
   Reveal Solution Discussion Select an answer first
6. 70application · medium

   A healthcare organization is planning a project to deploy endpoint detection and response (EDR) software to 5,000 workstations. The project manager has a fixed budget and a 6-month deadline. During planning, the team identifies that the current network bandwidth cannot support the initial deployment without impacting clinical operations. Which planning action should the CISO take to address this risk?

   • ARemove the network impact assessment from the plan to avoid delaying the project schedule.
   • BAssign the deployment task to the network team without adjusting the schedule or resources.
   • CIncrease the project budget to purchase additional network capacity to support the deployment.
   • DIncorporate a phased deployment schedule that staggers installation during off-peak hours and includes a network impact assessment.
   Reveal Solution Discussion Select an answer first