Question 1

The networks layer of the bull's-eye is the outermost ring of the bull's eye.

Accepted Answer

A) True 
 B)False  False

Question 2

Tasks or action steps that come after the task at hand are called ____________________.

Accepted Answer

successors

Question 3

A(n)____________________ is a completed document or program module that can either serve as the beginning point for a later task or become an element in the finished project.

Accepted Answer

deliverable

Question 4

One of the oldest models of change is the ____________________ change model.

Accepted Answer

The answer of One of the oldest models of change...

Question 5

____ is a simple planning tool.

Accepted Answer

A)  RFP
B)  WBS
C)  ISO 17799
D)  SDLC

Question 6

The tasks or action steps that come before the specific task at hand are called successors._________________________

Accepted Answer

A) True 
 B)False

Question 7

What can the organization do by managing the process of change?

Accepted Answer

The answer of What can the organization do by managing...

Question 8

The security systems implementation life cycle is a process for collecting information about an organization's objectives,its technical architecture,and its information security environment._________________________

Accepted Answer

A) True 
 B)False

Question 9

Technology ____ guides how frequently technical systems are updated,and how technical updates are approved and funded.

Accepted Answer

A)  wrap-up
B)  governance
C)  turnover
D)  changeover

Question 10

The goal of the ____ is to resolve any pending issues,critique the overall effort of the project,and draw conclusions about how to improve the process for the future.

Accepted Answer

A)  direct changeover
B)  wrap-up
C)  phased implementation
D)  pilot implementation

Question 11

The level of resistance to ____________________ impacts the ease with which an organization is able to implement the procedural and managerial changes.

Accepted Answer

The answer of The level of resistance to ____________________ impacts...

Question 12

Weak management support,with overly delegated responsibility and no champion,sentences the project to almost-certain failure.

Accepted Answer

A) True 
 B)False

Question 13

Project ____________________ describes the amount of time and effort-hours needed to deliver the planned features and quality level of the project deliverables.

Accepted Answer

The answer of Project ____________________ describes the amount of time...

Question 14

A cybernetic loop ensures that progress is measured periodically._________________________

Accepted Answer

A) True 
 B)False

Question 15

A(n)____________________ implementation is the most common conversion strategy and involves a measured rollout of the planned system with a part of the whole being brought out and disseminated across an organization before the next piece is implemented.

Accepted Answer

The answer of A(n)____________________ implementation is the most common conversion...

Question 16

The size of the organization and the normal conduct of business may preclude a single large training program on new security procedures or technologies.

Accepted Answer

A) True 
 B)False

Question 17

Public organizations often have "____" to spend all their remaining funds before the end of the fiscal year.

Accepted Answer

A)  end-of-fiscal-year spending-sprees
B)  end-of-year spend-a-thons
C)  end-of-fiscal spending-sprees
D)  end-of-fiscal-year spend-a-thons

Question 18

Each organization has to determine its own project management methodology for IT and information security projects.

Accepted Answer

A) True 
 B)False

Question 19

Management should coordinate the organization's information security vision and objectives with the communities of ____________________ involved in the execution of the plan.

Accepted Answer

The answer of Management should coordinate the organization's information security...

Question 20

A(n)____,typically prepared in the analysis phase of the SecSDLC,must be reviewed and verified prior to the development of the project plan.

Accepted Answer

A)  RFP
B)  WBS
C)  SDLC
D)  CBA

Exam 10: Implementing Information Security

The networks layer of the bull's-eye is the outermost ring of the bull's eye.

Tasks or action steps that come after the task at hand are called ____________________.

A(n)____________________ is a completed document or program module that can either serve as the beginning point for a later task or become an element in the finished project.

One of the oldest models of change is the ____________________ change model.

____ is a simple planning tool.

The tasks or action steps that come before the specific task at hand are called successors._________________________

What can the organization do by managing the process of change?

The security systems implementation life cycle is a process for collecting information about an organization's objectives,its technical architecture,and its information security environment._________________________

Technology ____ guides how frequently technical systems are updated,and how technical updates are approved and funded.

The goal of the ____ is to resolve any pending issues,critique the overall effort of the project,and draw conclusions about how to improve the process for the future.

The level of resistance to ____________________ impacts the ease with which an organization is able to implement the procedural and managerial changes.

Weak management support,with overly delegated responsibility and no champion,sentences the project to almost-certain failure.

Project ____________________ describes the amount of time and effort-hours needed to deliver the planned features and quality level of the project deliverables.

A cybernetic loop ensures that progress is measured periodically._________________________

A(n)____________________ implementation is the most common conversion strategy and involves a measured rollout of the planned system with a part of the whole being brought out and disseminated across an organization before the next piece is implemented.

The size of the organization and the normal conduct of business may preclude a single large training program on new security procedures or technologies.

Public organizations often have "____" to spend all their remaining funds before the end of the fiscal year.

Each organization has to determine its own project management methodology for IT and information security projects.

Management should coordinate the organization's information security vision and objectives with the communities of ____________________ involved in the execution of the plan.

A(n) ____,typically prepared in the analysis phase of the SecSDLC,must be reviewed and verified prior to the development of the project plan.