1.3 - Evaluate and Apply Security Governance Principles CISSP Practice Questions (Page 5)

Questions 21–24

1. 21foundation · easy

   Which of the following frameworks is primarily focused on IT governance and aligning IT processes with business objectives?

   • ANIST SP 800-53
   • BSABSA
   • CCOBIT
   • DFedRAMP
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is a primary purpose of a governance committee in an organization's security governance structure?

   • ATo execute day-to-day security operations and incident response
   • BTo develop and test all security controls for the organization
   • CTo approve and oversee security policies, standards, and major security initiatives
   • DTo replace the need for a dedicated security team
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is establishing a security governance committee to oversee its security program. Which of the following is the primary responsibility of this committee?

   • AConducting penetration tests on critical systems.
   • BInstalling and configuring security software.
   • CPerforming day-to-day security monitoring and incident response.
   • DReviewing and approving security policies and ensuring alignment with business objectives.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is considering adopting a new cloud-based CRM system. The security team has identified potential risks and presented them to management. Management decides to proceed, accepting the risks. Which action demonstrates due diligence?

   • ADocumenting the risk decision and the rationale in the risk register.
   • BIgnoring the risks because management has accepted them.
   • CReassigning the risks to the cloud provider.
   • DProceeding without any further action, as management has accepted the risks.
   Reveal Solution Discussion Select an answer first