An Enterprise's Chief Technology Officer (CTO) and Chief Information Security

question 202

Multiple Choice

An enterprise's Chief Technology Officer (CTO) and Chief Information Security Officer (CISO) are meeting to discuss ongoing capacity and resource planning issues. The enterprise has experienced rapid, massive growth over the last 12 months, and the technology department is stretched thin for resources. A new accounting service is required to support the enterprise's growth, but the only available compute resources that meet the accounting service requirements are on the virtual platform, which is hosting the enterprise's website. Which of the following should the CISO be MOST concerned about?

• A) Poor capacity planning could cause an oversubscribed host, leading to poor performance on the company's website.
• B) A security vulnerability that is exploited on the website could expose the accounting service.
• C) Transferring as many services as possible to a CSP could free up resources.
• D) The CTO does not have the budget available to purchase required resources and manage growth.

---

Definitions:

Sample Standard Deviation

A measure of the dispersion or variability of a set of sample data points around its mean.

Empirical Rule

The Empirical Rule, also known as the 68-95-99.7 rule, states that for a normal distribution, roughly 68% of data falls within one standard deviation of the mean, 95% within two standard deviations, and 99.7% within three standard deviations.

Coefficient of Variation

A statistical measure that shows the dispersion of data points or distribution relative to the mean, usually expressed as a percentage.

Standard Deviation

It quantifies the dispersion of a dataset relative to its mean, indicating how spread out the data points are.