A project to implement a new identity and access management (IAM) system is nearing completion. The quality assurance team has identified that the system does not fully meet the access review requirements specified in the project plan. The project sponsor wants to close the project on time. What should the project manager do?

Proceed with closure and assume the access review requirement is not critical.

Document the gap, develop a corrective action plan, and obtain sponsor approval to extend the timeline for the required fixes.

Ask the quality assurance team to relax the requirements to meet the deadline.

Close the project as planned and note the gap in the final report for future improvement.

A project manager is leading a security project with a distributed team across multiple time zones. The project requires frequent status updates and issue tracking. Which project management tool or technique would be MOST effective for this situation?

A spreadsheet shared via email on a weekly basis

A cloud-based project management platform with real-time dashboards and issue tracking

A physical whiteboard in the main office

A series of in-person meetings held monthly

During the planning of a network segmentation project, the project team identifies that a legacy application will break if the network is segmented as planned. What is the BEST risk response strategy?

Accept the risk and proceed with segmentation as planned

Avoid the risk by canceling the entire segmentation project

Mitigate the risk by planning a compatibility upgrade for the legacy application

Transfer the risk to the application vendor

Which activity is part of quality assurance in a security project?

Conducting security testing and validation of deliverables

A financial services company is initiating a project to implement a new customer data encryption solution. The project must comply with PCI DSS and local data protection regulations. During the initiation phase, what is the MOST critical compliance-related action?

Wait until the solution is designed and then assess compliance to avoid restricting the design options.

Delegate all compliance decisions to the legal team without involving the project team.

Assume that the encryption solution will automatically meet all compliance requirements.

Identify all applicable compliance requirements and incorporate them into the project scope and objectives.

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 2

Information Security Projects CCISO Practice Questions (Page 3)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 71 practice questions to prepare you well beyond it. (estimate)

71questions here

15free pages

20concepts

20 Concepts in This Objective

Project Management Fundamentals
Project Lifecycle
Project Initiation
Project Planning
Project Execution
Project Monitoring and Control
Project Closure
Security Project Governance
Stakeholder Management
Resource Management
Risk Management in Projects
Quality Assurance in Projects
Communication Management
Integration with Security Operations
Compliance and Standards
Project Management Tools and Techniques
Vendor and Procurement Management
Change Management
Metrics and KPIs
Continuous Improvement

Questions 11–15

11application · medium
A project to implement a new identity and access management (IAM) system is nearing completion. The quality assurance team has identified that the system does not fully meet the access review requirements specified in the project plan. The project sponsor wants to close the project on time. What should the project manager do?
Select an answer first
12application · medium
A project manager is leading a security project with a distributed team across multiple time zones. The project requires frequent status updates and issue tracking. Which project management tool or technique would be MOST effective for this situation?
Select an answer first
13application · medium
During the planning of a network segmentation project, the project team identifies that a legacy application will break if the network is segmented as planned. What is the BEST risk response strategy?
Select an answer first
14foundation · easy
Which activity is part of quality assurance in a security project?
Select an answer first
15application · medium
A financial services company is initiating a project to implement a new customer data encryption solution. The project must comply with PCI DSS and local data protection regulations. During the initiation phase, what is the MOST critical compliance-related action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.