1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security lead reviews a dashboard showing that two of five implementation milestones are behind schedule and immediately reassigns resources to the delayed tasks. What is the lead doing?

   • ADesigning the security architecture
   • BConducting a strategy review
   • CMonitoring execution and taking corrective action
   • DPerforming requirements elicitation
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has had the same security strategy for three years. Recently, several new regulations were introduced, and the threat landscape has changed significantly. What should the security manager do to ensure the strategy remains effective?

   • AContinue with the existing strategy since it has worked well so far.
   • BWait for a security incident to occur before making any changes.
   • CConduct a periodic review of the security strategy to assess its effectiveness and incorporate new requirements.
   • DReplace the entire strategy with a completely new one without review.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An organization schedules a quarterly meeting to evaluate whether its security strategy is still effective, gather input from stakeholders, and update the strategy based on new threat intelligence. What process is being followed?

   • ASecurity requirements elicitation
   • BSecurity strategy execution
   • CSecurity strategy review and maintenance
   • DCapacity assessment
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A mid-sized company plans to implement a new security strategy that includes deploying a SIEM and hiring a 24/7 security operations center (SOC) team. The current security team consists of two analysts who handle incident response part-time. What should the security manager do first?

   • ADevelop a detailed implementation plan with timelines and milestones.
   • BImmediately begin recruiting additional security analysts.
   • CPurchase and deploy the SIEM solution to start collecting logs.
   • DAssess the organization's current security capacity and capability to support the new strategy.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security strategy implementation is nearing completion. The security manager wants to ensure that the implemented controls are effective and that any issues are addressed. What should be done as part of the execution and monitoring phase?

   • ADisband the implementation team immediately after the last milestone is met.
   • BRely on the security team to report issues only if they occur.
   • CConduct a post-implementation review to evaluate the effectiveness of the controls.
   • DMove on to the next project without reviewing the outcomes.
   Reveal Solution Discussion Select an answer first