Question 1

Which of the following is considered a project versus a managed process?

Accepted Answer

A project is a temporary endeavor with a specific start and end, aimed at creating a unique product, service, or result. Installing a new firewall system fits this definition, as it is a one-time task with a clear goal and completion point.

Question 2

Which of the following is MOST beneficial in determining an appropriate balance between uncontrolled innovation and excessive caution in an organization?

Accepted Answer

Defining the risk appetite helps an organization understand the level of risk it is willing to accept, which is crucial in balancing innovation and caution.

Question 3

A newly appointed security officer finds data leakage software licenses that had never been used. The officer decides to implement a project to ensure it gets installed, but the project gets a great deal of resistance across the organization. Which of the following represents the MOST likely reason for this situation?

Accepted Answer

The most likely reason for resistance is that the project was initiated without obtaining support from the impacted business units, leading to a lack of buy-in and cooperation.

Question 4

When considering using a vendor to help support your security devices remotely, what is the BEST choice for allowing access?

Accepted Answer

Providing the vendor with a company-supplied laptop ensures that the device is secure and compliant with company policies. Using two-factor authentication with unique credentials for each vendor enhances security by ensuring accountability and traceability.

Question 5

A CISO sees abnormally high volumes of exceptions to security requirements and constant pressure from business units to change security processes. Which of the following represents the MOST LIKELY cause of this situation?

Accepted Answer

The most likely cause is poor alignment of the security program to business needs, leading to frequent exceptions and pressure to change processes.

Question 6

Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

Accepted Answer

Risk appetite refers to the amount and type of risk an organization is willing to take in order to meet its objectives, including the potential financial loss it is willing to suffer if a system fails.

Question 7

File Integrity Monitoring (FIM) is considered a________________________.

Accepted Answer

File Integrity Monitoring (FIM) is a security detective control because it monitors and detects changes to files, alerting administrators to potential unauthorized modifications.

Question 8

A stakeholder is a person or group:

Accepted Answer

Stakeholders are individuals or groups with an interest in the success or failure of a project, regardless of budget implications. They can include users, sponsors, and others affected by the project's outcome.

Question 9

What are the primary reasons for the development of a business case for a security project?

Accepted Answer

A business case for a security project is primarily developed to communicate the risks involved and to forecast the resources needed to address those risks effectively.

Question 10

Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

Accepted Answer

Involving business units in the creation of controls ensures they understand the necessity and applicability of the controls, leading to better acceptance and compliance.

Question 11

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets. This demonstrates which of the following principles?

Accepted Answer

Implementing smart cards for credential management enforces security organizational policies by reducing reliance on passwords and enhancing security measures, which in turn reduces help desk costs associated with password resets.

Question 12

A CISO decides to analyze the IT infrastructure to ensure security solutions adhere to the concepts of how hardware and software is implemented and managed within the organization. Which of the following principles does this best demonstrate?

Accepted Answer

The answer of A CISO decides to analyze the IT...

Question 13

This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

Accepted Answer

Scope creep refers to the gradual expansion of project deliverables beyond the original plan, often without proper adjustments to time, cost, or resources.

Question 14

Which of the following methods are used to define contractual obligations that force a vendor to meet customer expectations?

Accepted Answer

Service Level Agreements (SLA) are specifically designed to define the level of service expected from a vendor, including metrics and obligations, to ensure customer expectations are met.

Question 15

Which of the following is considered one of the most frequent failures in project management?

Accepted Answer

Failure to meet project deadlines is a common issue in project management due to poor planning, unforeseen challenges, or resource constraints.

Question 16

The security team has investigated the theft/loss of several unencrypted laptop computers containing sensitive corporate information. To prevent the loss of any additional corporate data it is unilaterally decided by the CISO that all existing and future laptop computers will be encrypted. Soon, the help desk is flooded with complaints about the slow performance of the laptops and users are upset. What did the CISO do wrong?

Accepted Answer

The CISO failed to identify all stakeholders and their needs, leading to user dissatisfaction due to performance issues.

Question 17

The Security Operations Center (SOC) just purchased a new intrusion prevention system (IPS) that needs to be deployed in-line for best defense. The IT group is concerned about putting the new IPS in-line because it might negatively impact network availability. What would be the BEST approach for the CISO to reassure the IT group?

Accepted Answer

Deploying the IPS in monitor mode initially allows the IT group to observe its behavior without impacting network traffic, ensuring it doesn't block legitimate traffic before being fully implemented in-line.

Question 18

When entering into a third party vendor agreement for security services, at what point in the process is it BEST to understand and validate the security posture and compliance level of the vendor?

Accepted Answer

Understanding and validating the security posture and compliance level of the vendor should be done prior to signing the agreement to ensure that the vendor meets the necessary security requirements and to mitigate any potential risks.

Question 19

Which of the following functions implements and oversees the use of controls to reduce risk when creating an information security program?

Accepted Answer

Risk Management involves implementing and overseeing controls to reduce risk in an information security program.

Question 20

Risk appetite is typically determined by which of the following organizational functions?

Accepted Answer

The answer of Risk appetite is typically determined by which...

Exam 2: Certified Network Defender