The Role of the CISO CCISO Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A financial services firm's CISO has a flat security budget for the next fiscal year. The firm is launching a new mobile app that will handle sensitive customer data, and the security team needs to support it. The CISO must decide how to allocate existing resources. Which approach best balances the new initiative with ongoing security operations?

   • ADelay the mobile app launch until the next fiscal year when more budget may be available.
   • BReallocate two senior analysts from the SOC to the mobile app project, leaving the SOC understaffed.
   • CReduce the frequency of penetration tests on existing systems to fund the mobile app testing.
   • DUse a risk-based approach to shift budget from lower-priority projects to the mobile app security testing while maintaining SOC coverage.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the CISO's involvement in third-party risk management?

   • ATo delegate all third-party risk to the procurement department
   • BTo approve all vendor contracts without review
   • CTo ignore third-party risks if the vendor is well-known
   • DTo assess and manage risks associated with vendors and partners
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the CISO's role in fostering a security-aware culture?

   • ATo keep security awareness limited to the IT department
   • BTo enforce security policies through punishment only
   • CTo focus solely on technical controls and ignore human factors
   • DTo implement and support security awareness training programs for employees
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A CISO has a limited security budget and must choose between investing in a new SIEM platform or expanding the security awareness training program. The company has recently experienced several successful phishing attacks that led to data breaches, but the SOC team lacks visibility into endpoint activity. The CISO must justify the budget allocation to the CFO. What is the most defensible approach?

   • AAllocate the entire budget to the SIEM platform because improved visibility will help detect future attacks.
   • BAllocate the entire budget to security awareness training because phishing is the current threat.
   • CSplit the budget between the SIEM and training, prioritizing based on a risk assessment that quantifies the likely impact of each investment.
   • DDefer the decision until the next quarter when more budget may be available.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A manufacturing company's CISO needs to report the security posture to the board of directors. The board is composed of non-technical members who are concerned about recent industry cyberattacks. What is the most effective way for the CISO to communicate the current risk level?

   • AShare raw log data from the SIEM to demonstrate monitoring activity.
   • BPresent a detailed list of all vulnerabilities and their CVSS scores.
   • CDistribute the full incident response plan for the board to review.
   • DUse a risk heat map showing likelihood and impact of top threats, with plain-language explanations.
   Reveal Solution Discussion Select an answer first