Information Security Projects CCISO Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is a best practice for incorporating lessons learned into an organization's project management process?

   • ADeleting lessons learned after the project is closed
   • BReviewing lessons learned at the start of each new project
   • CKeeping lessons learned confidential from project teams
   • DOnly documenting lessons learned from failed projects
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A firewall upgrade project has been completed and the new firewalls are operational. The security operations team has confirmed that all rules are working as expected. What is the MOST important activity to perform during project closure to ensure a smooth transition and future improvement?

   • ADecommission the old firewalls immediately to reduce maintenance costs.
   • BCelebrate the project success with the team and close the project without further documentation.
   • CArchive all project documentation and immediately delete any temporary files to free up storage.
   • DConduct a lessons-learned session with the project team and document findings for future security projects.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the main purpose of developing a project plan for an information security initiative?

   • ATo replace the need for ongoing security operations
   • BTo satisfy regulatory compliance requirements only
   • CTo provide a detailed roadmap for executing, monitoring, and controlling the project
   • DTo document the organization's security policies
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is a key activity in the project closure phase for an information security project?

   • AAllocating project resources
   • BMonitoring project risks
   • CObtaining formal acceptance of deliverables from the sponsor
   • DDeveloping the project charter
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   After completing a security project to deploy a new firewall, the project team conducts a lessons-learned session. Several team members note that the vendor's documentation was incomplete, causing delays. The CISO wants to improve future projects. What is the MOST effective way to apply this lesson?

   • ABlame the vendor for the issue and avoid working with them in the future.
   • BUpdate the organization's vendor evaluation criteria to include documentation quality as a mandatory requirement in future procurement.
   • CShare the lesson with the project team but do not change any organizational processes.
   • DDocument the issue in the project closure report and archive it without further action.
   Reveal Solution Discussion Select an answer first