Certified Chief Information Security Officer (CCISO) — Question 43

Which of the following is considered a project versus a managed process?

Answer options

• A. ongoing risk assessment of routine operations
• B. continuous vulnerability assessment and vulnerability repair
• C. monitoring external and internal environment during incident response
• D. installation of a new firewall system

Correct answer: D

Explanation

The installation of a new firewall system is a distinct project with a defined beginning and end, making it a project. In contrast, the other options describe ongoing processes that are part of continuous operations and management rather than finite projects.