Which of the following is an example of a technical risk in an information security project?

Team members may leave the organization

The new security tool may not integrate with existing systems

Why must information security projects comply with relevant laws and regulations?

To eliminate the need for security controls

To make the project more complex

To avoid legal penalties and ensure the organization meets its obligations

A security project to implement data loss prevention (DLP) requires specialized expertise that is not available in-house. The project budget is limited, and the timeline is aggressive. The project manager must allocate resources to complete the project. What is the MOST appropriate resource management strategy?

Reduce the project scope to avoid the need for specialized expertise.

Hire a contractor with DLP expertise for the duration of the project and transfer knowledge to internal staff before closure.

Assign the project to a junior team member to save costs and hope they learn on the job.

Train existing IT staff on DLP technology, even though it will delay the project by several months.

A security project to implement multi-factor authentication (MFA) for all remote users is facing resistance from the sales team, who feel it will slow down their workflow. The project manager needs to gain their buy-in. Which approach is MOST effective?

Delay the project until the sales team fully supports it

Mandate the MFA rollout without further discussion

Engage sales team representatives in the planning and communicate the security benefits

Implement MFA only for non-sales employees

Which activity is performed during the execution phase of a security project?

Implementing the security controls as specified in the plan

EC-CouncilCertified Chief Information Security Officer

Domain 3Objective 2

Information Security Projects CCISO Practice Questions (Page 4)

Part of the Security Program Management and Operations domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 71 practice questions to prepare you well beyond it. (estimate)

71questions here

15free pages

20concepts

20 Concepts in This Objective

Project Management Fundamentals
Project Lifecycle
Project Initiation
Project Planning
Project Execution
Project Monitoring and Control
Project Closure
Security Project Governance
Stakeholder Management
Resource Management
Risk Management in Projects
Quality Assurance in Projects
Communication Management
Integration with Security Operations
Compliance and Standards
Project Management Tools and Techniques
Vendor and Procurement Management
Change Management
Metrics and KPIs
Continuous Improvement

Questions 16–20

16foundation · easy
Which of the following is an example of a technical risk in an information security project?
Select an answer first
17foundation · easy
Why must information security projects comply with relevant laws and regulations?
Select an answer first
18application · medium
A security project to implement data loss prevention (DLP) requires specialized expertise that is not available in-house. The project budget is limited, and the timeline is aggressive. The project manager must allocate resources to complete the project. What is the MOST appropriate resource management strategy?
Select an answer first
19application · medium
A security project to implement multi-factor authentication (MFA) for all remote users is facing resistance from the sales team, who feel it will slow down their workflow. The project manager needs to gain their buy-in. Which approach is MOST effective?
Select an answer first
20foundation · easy
Which activity is performed during the execution phase of a security project?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.