During the rollout of a new security strategy, the program manager coordinates the network team, the application team, and the compliance team to ensure their tasks stay on schedule. Which activity is being performed?

Security requirements elicitation

Security strategy execution and monitoring

During the planning phase for a new customer-facing mobile application, the security manager is asked to identify what security controls must be built into the project. Which activity is being performed?

Security requirements elicitation

During the implementation of a new security strategy, the security manager notices that the project is behind schedule because the network team is not completing their tasks on time. What is the most effective course of action?

Ignore the delay and hope the team catches up later.

Reassign the network team's tasks to other teams without discussion.

Escalate the issue to senior management and request additional resources.

Meet with the network team to identify obstacles and adjust the project plan accordingly.

A healthcare organization is designing a new patient portal that will store sensitive health information. The business goal is to provide patients with easy access to their records while ensuring compliance with data protection regulations. Which security architecture principle should be prioritized?

Designing a layered defense-in-depth approach that includes network segmentation, encryption, and access controls.

Implementing a single strong authentication mechanism for all users.

Outsourcing all security controls to a third-party provider to reduce internal complexity.

Focusing solely on encryption of data at rest to meet compliance requirements.

Before committing to a strategy that requires 24/7 security monitoring, the security manager reviews the current staffing levels, available tools, and the maturity of existing incident response processes. What is being evaluated?

Capacity and capability assessment

Security requirements elicitation

Information Systems Security Management Professional

Domain 1Objective 3

1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 4)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

21%of the exam

Questions 16–20

16foundation · easy
During the rollout of a new security strategy, the program manager coordinates the network team, the application team, and the compliance team to ensure their tasks stay on schedule. Which activity is being performed?
Select an answer first
17foundation · easy
During the planning phase for a new customer-facing mobile application, the security manager is asked to identify what security controls must be built into the project. Which activity is being performed?
Select an answer first
18application · medium
During the implementation of a new security strategy, the security manager notices that the project is behind schedule because the network team is not completing their tasks on time. What is the most effective course of action?
Select an answer first
19application · medium
A healthcare organization is designing a new patient portal that will store sensitive health information. The business goal is to provide patients with easy access to their records while ensuring compliance with data protection regulations. Which security architecture principle should be prioritized?
Select an answer first
20foundation · easy
Before committing to a strategy that requires 24/7 security monitoring, the security manager reviews the current staffing levels, available tools, and the maturity of existing incident response processes. What is being evaluated?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 4)

Questions 16–20

During the rollout of a new security strategy, the program manager coordinates the network team, the application team, and the compliance team to ensure their tasks stay on schedule. Which activity is being performed?

During the planning phase for a new customer-facing mobile application, the security manager is asked to identify what security controls must be built into the project. Which activity is being performed?

During the implementation of a new security strategy, the security manager notices that the project is behind schedule because the network team is not completing their tasks on time. What is the most effective course of action?

Before committing to a strategy that requires 24/7 security monitoring, the security manager reviews the current staffing levels, available tools, and the maturity of existing incident response processes. What is being evaluated?

Keep studying — Leadership and Organizational Management