SC-100 Security Strategy Alignment Quiz

1. Which governance model best supports rapid business innovation while maintaining security?

Centralized security control with no delegation

Distributed security responsibility with centralized oversight

Minimal governance to avoid slowing development

Security team makes all business decisions

2. Which outcome best reflects successful alignment of security strategy with business goals?

Zero security incidents annually

100% compliance with all security policies

Security enables business objectives while managing acceptable risk

Lowest total cost of security operations

3. Security controls that enable business processes rather than obstruct them are more likely to achieve organizational adoption. True or False?

True

False

Submit

5. Which stakeholder group has the primary responsibility for defining organizational risk tolerance?

Chief Information Security Officer (CISO)

IT operations team

Executive leadership and board of directors

Security operations center (SOC) analysts

6. A security roadmap should include milestones tied to business outcomes rather than just security activities. True or False?

True

False

7. Effective security strategy requires balancing which two organizational priorities?

Cost reduction and employee satisfaction

Security protection and business enablement

Compliance and audit readiness

Threat prevention and incident response

Submit

9. Which approach best ensures security controls remain relevant to evolving business needs?

Implement controls once and review annually

Continuous monitoring and periodic reassessment aligned with strategy

Only update controls when breaches occur

Security team determines all control changes independently

10. Security metrics should be designed to demonstrate business value, not just technical activities. True or False?

True

False

11. Which framework best helps organizations align security objectives with overall business strategy?

NIST Cybersecurity Framework

Balanced Scorecard approach

ISO 27001 controls

COBIT governance framework

Submit

13. What is a key advantage of implementing security controls that align with business processes?

Eliminates all cybersecurity threats

Reduces friction and increases user adoption

Guarantees regulatory compliance

Removes the need for security awareness training

14. Zero Trust Architecture aligns with business agility by reducing reliance on perimeter-based security. True or False?

True

False

15. Which of the following best describes the relationship between compliance and security?

Compliance is a subset of security; meeting compliance requirements ensures security

Security is a subset of compliance; security controls support compliance objectives

They are independent concepts with no overlap

Compliance eliminates the need for additional security measures

Submit

17. Risk tolerance is determined by an organization's willingness to accept residual risk based on business priorities. True or False?

True

False

18. Which metric best demonstrates security's contribution to business resilience?

Number of vulnerabilities patched

Mean time to recovery (MTTR) from incidents

Total security budget spent

Percentage of employees trained

19. Security governance ensures accountability by establishing clear roles, responsibilities, and decision-making authority. True or False?

True

False

20. What is the primary purpose of conducting a business impact analysis (BIA) in security planning?

To identify all potential threats

To determine critical assets and acceptable downtime

To eliminate all security risks

To reduce IT infrastructure costs

SC-100 Security Strategy Alignment with Business Goals Quiz

1. Which governance model best supports rapid business innovation while maintaining security?

2.

What first name or nickname would you like us to use?

2. Which outcome best reflects successful alignment of security strategy with business goals?

3. Security controls that enable business processes rather than obstruct them are more likely to achieve organizational adoption. True or False?

4. The process of identifying which business processes depend on specific IT systems is called ____.

5. Which stakeholder group has the primary responsibility for defining organizational risk tolerance?

6. A security roadmap should include milestones tied to business outcomes rather than just security activities. True or False?

7. Effective security strategy requires balancing which two organizational priorities?

8. In the context of security strategy, a ____is an unwanted event that could harm the organization's ability to achieve business objectives.

9. Which approach best ensures security controls remain relevant to evolving business needs?

10. Security metrics should be designed to demonstrate business value, not just technical activities. True or False?

11. Which framework best helps organizations align security objectives with overall business strategy?

12. The term used to describe the maximum amount of loss an organization can tolerate is ____.

13. What is a key advantage of implementing security controls that align with business processes?

14. Zero Trust Architecture aligns with business agility by reducing reliance on perimeter-based security. True or False?

15. Which of the following best describes the relationship between compliance and security?

16. A security strategy that conflicts with business operations will likely fail because it lacks ____.

17. Risk tolerance is determined by an organization's willingness to accept residual risk based on business priorities. True or False?

18. Which metric best demonstrates security's contribution to business resilience?

19. Security governance ensures accountability by establishing clear roles, responsibilities, and decision-making authority. True or False?

20. What is the primary purpose of conducting a business impact analysis (BIA) in security planning?