Security Program Development GSTRT Practice Questions (Page 9)

Questions 41–42

1. 41application · medium

   A transportation company is developing a security roadmap. The company's strategic goal is to improve operational efficiency through IoT sensors in its fleet. The security team must ensure that the roadmap supports this goal without introducing excessive risk. Which approach best aligns the roadmap with the company's strategy?

   • AInclude security controls for IoT devices as a priority, with a phased approach that aligns with the IoT deployment timeline.
   • BFocus the roadmap on traditional IT security and ignore IoT-specific risks.
   • CCreate a roadmap that treats IoT security as a separate, independent project.
   • DRecommend delaying the IoT initiative until all security controls are fully mature.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An e-commerce company is considering implementing a web application firewall (WAF). The CISO needs to build a business case. Which metric would best support the business case?

   • APercentage of web traffic that is encrypted
   • BNumber of web application attacks blocked per month
   • CAverage cost of a data breach in the industry
   • DEstimated reduction in the likelihood of a successful web attack and the associated financial impact
   Reveal Solution Discussion Select an answer first