A healthcare organization is planning a project to deploy endpoint detection and response (EDR) across 5,000 devices. The project manager has a limited budget and a fixed go-live date. Which planning approach best addresses the risk of scope creep while ensuring the project stays on schedule?

Freeze all requirements and prohibit any changes after the planning phase

Include a change control process and a contingency reserve in the project plan

Add extra resources to the project team to accelerate the schedule

Defer all risk management activities until after the go-live date

What is the purpose of risk management in an information security project?

To transfer all risks to the customer

To eliminate all risks from the project

To identify, assess, and mitigate risks that could affect project success

To document risks after the project is completed

A project to replace the legacy antivirus solution with a next-generation endpoint protection platform is in its final phase. The security operations team will be responsible for the daily monitoring. What should the project manager do to ensure a seamless transition?

Decommission the legacy solution immediately after the new one is installed

Have the project team continue to support the solution indefinitely

Leave the new solution running without documentation

Include a formal handover and training for the security operations team in the project plan

What is the role of a steering committee in security project governance?

To provide high-level oversight and ensure alignment with strategic objectives

To perform day-to-day project tasks

How does applying lessons learned contribute to continuous improvement in security project management?

By focusing only on project failures

By eliminating the need for project planning

By identifying what worked well and what can be improved for future projects

By ensuring every project uses the same approach without changes

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 2

Information Security Projects CCISO Practice Questions (Page 2)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 71 practice questions to prepare you well beyond it. (estimate)

71questions here

15free pages

20concepts

20 Concepts in This Objective

Project Management Fundamentals
Project Lifecycle
Project Initiation
Project Planning
Project Execution
Project Monitoring and Control
Project Closure
Security Project Governance
Stakeholder Management
Resource Management
Risk Management in Projects
Quality Assurance in Projects
Communication Management
Integration with Security Operations
Compliance and Standards
Project Management Tools and Techniques
Vendor and Procurement Management
Change Management
Metrics and KPIs
Continuous Improvement

Questions 6–10

6application · medium
A healthcare organization is planning a project to deploy endpoint detection and response (EDR) across 5,000 devices. The project manager has a limited budget and a fixed go-live date. Which planning approach best addresses the risk of scope creep while ensuring the project stays on schedule?
Select an answer first
7foundation · easy
What is the purpose of risk management in an information security project?
Select an answer first
8application · medium
A project to replace the legacy antivirus solution with a next-generation endpoint protection platform is in its final phase. The security operations team will be responsible for the daily monitoring. What should the project manager do to ensure a seamless transition?
Select an answer first
9foundation · easy
What is the role of a steering committee in security project governance?
Select an answer first
10foundation · easy
How does applying lessons learned contribute to continuous improvement in security project management?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.