ISC Leadership And Organizational Management Practice Test 2 — 15 Questions

Question 1

An ISSMP is conducting a security awareness program. What is the primary metric for measuring the success of this program?

Accepted Answer

Change in behavior evidenced by incident reduction or simulation data. A reduction in actual security incidents or improved response to simulated phishing tests are direct indicators of improved security behavior, which is the program's goal.

Answer

The cost per employee for training

Answer

Number of training slides created

Answer

Percentage of employees who attended sessions

Question 2

To ensure security requirements are integrated into the System Development Life Cycle (SDLC), what is the most effective approach for the security team?

Accepted Answer

Embedding security champions within development teams. Embed security champions within development teams to act as liaisons, ensuring security is considered throughout the development process rather than treated as a final check.

Answer

Requiring developers to attend annual security seminars

Answer

Automating the code deployment process

Answer

Mandating a security review before production release

Question 3

An organization is expanding into a new region. What is the most important first step for the ISSMP?

Accepted Answer

Conducting a regulatory and legal gap analysis. Conducting a regulatory and legal gap analysis ensures that the organization understands the compliance requirements of the new jurisdiction before initiating operations.

Answer

Updating the corporate security policy

Answer

Deploying security monitoring tools

Answer

Hiring a local security manager

Question 4

When managing a security incident, what is the primary role of the CISO in a large enterprise?

Accepted Answer

Ensuring communication and strategic coordination. The CISO should focus on strategic decision-making, stakeholder communication, and resource management, leaving the tactical investigation to the incident response team.

Answer

Updating firewall rules manually

Answer

Performing forensic analysis on the compromised server

Answer

Drafting the initial incident response report

Question 5

A CISO needs to justify an increase in the security budget. Which argument is most persuasive to the Chief Financial Officer (CFO)?

Accepted Answer

Quantifying financial exposure from potential security events. Quantifying the cost of potential data breaches in terms of lost revenue and regulatory fines demonstrates the financial risk the CFO is helping to manage.

Answer

Comparing the budget to industry peers

Answer

Focusing on the technical features of a new tool

Answer

Listing the latest security threats in the industry

Question 6

An organization wants to improve its security posture against supply chain attacks. Which action is most effective for an ISSMP?

Accepted Answer

Implementing a third-party risk management program. Implementing a third-party risk management (TPRM) program that assesses vendors' security practices is the best way to address risks introduced by the supply chain.

Answer

Outsourcing all IT functions to a single large provider

Answer

Replacing all proprietary software with open-source

Answer

Increasing internal network segmentation

Question 7

Which of the following is the most important factor in the success of a security governance program?

Accepted Answer

Executive leadership support and commitment. Executive leadership support is the foundation upon which the security program is built; without it, policies lack authority and resources remain scarce.

Answer

The complexity of the security technology

Answer

The number of security staff members

Answer

The frequency of internal audits

Question 8

What is the primary purpose of an Incident Response (IR) plan?

Accepted Answer

To provide a structured approach to incident handling. An IR plan provides a structured, predefined approach to handling security incidents to minimize impact and ensure business continuity.

Answer

To identify all vulnerabilities in the network

Answer

To punish employees who cause incidents

Answer

To replace the need for security policies

Question 9

When aligning security with organizational goals, how should an ISSMP address a conflict between security controls and user productivity?

Accepted Answer

Conduct a risk-benefit analysis for alternative controls. Conduct a risk-benefit analysis to determine if the security control is truly necessary and if alternative, less intrusive controls exist that provide the same level of protection.

Answer

Remove the security control to favor productivity

Answer

Delegate the decision to the IT support manager

Answer

Enforce the security control regardless of impact

Question 10

When reporting to the board of directors, which presentation method is most effective for communicating security performance?

Accepted Answer

Dashboards correlating security metrics to business objectives. Using dashboards with KPIs that correlate security activity to business objectives (e.g., risk reduction, compliance status) provides the context necessary for informed board decision-making.

Answer

A list of all blocked malicious IP addresses

Answer

Detailed technical logs and packet captures

Answer

A full copy of the latest penetration test report

Question 11

An ISSMP is implementing a Disaster Recovery (DR) plan. Which objective is most important to define with business leaders?

Accepted Answer

Recovery Time Objective (RTO). Recovery Time Objective (RTO) defines the maximum acceptable downtime for a business service, which drives the design of the recovery infrastructure.

Answer

The total cost of the recovery site

Answer

The physical address of the secondary site

Answer

The names of the IT staff members

Question 12

Which of the following is a key component of a successful security awareness training program?

Accepted Answer

Regular, engaging, and relevant content. Regular, relevant, and engaging content is necessary to keep security top-of-mind for employees and to ensure long-term retention of good security practices.

Answer

Focusing only on threats to external users

Answer

Using outdated training videos to save costs

Answer

Mandating attendance once every five years

Question 13

Which TWO of the following are essential components of an effective security governance framework?

Accepted Answer

Clearly defined roles, responsibilities, and accountability. A comprehensive framework needs defined policies (what) and a structure of accountability (who) to ensure execution.

Answer

The latest artificial intelligence tools

Answer

A dedicated office space for the security team

Answer

A large annual security budget

Question 14

When managing a global security team, what is the primary challenge in maintaining a uniform security posture?

Accepted Answer

Cultural differences and local regulations. Cultural differences and local regulatory requirements make it difficult to enforce a single, global standard, requiring a balance between global directives and local adaptation.

Answer

Lack of global email systems

Answer

Time zone differences

Answer

Language barriers

Question 15

An ISSMP is evaluating a Cloud Access Security Broker (CASB) implementation. Which management goal is most effectively addressed by this tool?

Accepted Answer

Enforcing security policies for cloud application usage. A CASB provides visibility and control over cloud usage, enabling the enforcement of corporate security policies on data stored or accessed in cloud applications.

Answer

Automating the patching of local workstations

Answer

Managing user access to local databases

Answer

Securing the physical data center