Perform Technical Management ISSEP Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   What does 'efficiency' mean in the context of evaluating a security automation solution?

   • AThe solution is the most expensive option available
   • BThe solution requires no human oversight at all
   • CThe solution has the most features compared to other tools
   • DThe solution achieves the desired security outcome with minimal resource consumption
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A large organization is migrating its customer relationship management (CRM) system to a new cloud-based platform. The project is complex and involves multiple teams. The security engineer is part of the project team. The project manager has created a detailed schedule, but the security engineer notices that security requirements are only addressed at the end of the project, during the testing phase. The engineer is concerned that this approach will lead to significant rework and potential security vulnerabilities. The project manager is resistant to changing the schedule, citing the need to meet a tight deadline. What is the most effective approach for the security engineer to take?

   • AEscalate the issue to the project sponsor, explaining the risks of addressing security only at the end of the project.
   • BWork with the project manager to integrate security tasks into the existing schedule, demonstrating how this can be done without significantly impacting the deadline.
   • CRefuse to work on the project unless the schedule is changed to include security tasks from the beginning.
   • DAccept the project manager's decision and focus on conducting a thorough security test at the end of the project.
   Reveal Solution Discussion Select an answer first