GSTRT by GIAC Actual Free Exam Q&As

Question 1

Which of the following is a key step in developing a security program that can scale with business growth?
Response:

A. Avoiding investment in new technology B. Limiting the program to current business requirements C. Building flexible policies and controls that can adapt to changing business needs and threats D. Creating static policies that will never change

Discussion 0

Correct Answer: C Vote an answer

Question 2

Why is stakeholder buy-in critical during the development of a cybersecurity program?
Response:

A. Stakeholders do not play a role in cybersecurity B. Stakeholders need to be involved to delay the project C. Stakeholders can be ignored in favor of technical teams D. Stakeholders help ensure that the program is aligned with business objectives and has the necessary support for successful implementation

Discussion 0

Correct Answer: D Vote an answer

Question 3

When developing a policy for data retention and disposal, which of the following should be the top consideration?
Response:

A. The organization's server capacity B. Compliance with industry regulations and legal requirements C. The most cost-effective data storage solution D. Employee preferences on data storage

Discussion 0

Correct Answer: B Vote an answer

Question 4

What is the key factor that helps reduce resistance to change in a cybersecurity team?
Response:

A. Providing no rationale for the change B. Enforcing strict deadlines for the change without team input C. Delegating all responsibilities to a third party D. Offering clear, transparent communication about the reasons for the change and its benefits

Discussion 0

Correct Answer: D Vote an answer

Question 5

What is the best method to provide constructive feedback to a cybersecurity team member after a project failure?
Response:

A. Discuss their mistakes during a team meeting to provide a learning opportunity for others B. Highlight only the mistakes made during the project C. Send an email summarizing their mistakes and ask them to do better next time D. Schedule a private meeting, focus on areas for improvement, and offer actionable suggestions

Discussion 0

Correct Answer: D Vote an answer

Question 6

Which of the following is a common characteristic of insider threats?
Response:

A. They only affect financial systems B. They can only occur in large organizations C. They are always easy to detect D. They often involve individuals with legitimate access to critical systems and data

Discussion 0

Correct Answer: D Vote an answer

Question 7

What is the primary purpose of aligning cybersecurity strategy with an organization's business vision and mission?
Response:

A. To allow the security team to work autonomously from business stakeholders B. To prevent the cybersecurity program from receiving excessive funding C. To ensure that the cybersecurity strategy operates independently of business objectives D. To ensure the cybersecurity strategy supports business goals and adds value to the organization

Discussion 0

Correct Answer: D Vote an answer

Question 8

Which of the following is a key business driver that should influence a cybersecurity strategy?
Response:

A. Regulatory compliance requirements that the organization must meet B. Reducing the number of security policies C. The organization's desire to reduce its workforce D. The personal preferences of the security team

Discussion 0

Correct Answer: A Vote an answer

Question 9

What is the primary role of a cybersecurity leader during a major change initiative, such as a system overhaul or policy shift?
Response:

A. Solely focusing on budgetary aspects B. Communicating the change, ensuring alignment, and mitigating resistance C. Minimizing involvement and allowing the team to self-manage D. Implementing changes without feedback from the team

Discussion 0

Correct Answer: B Vote an answer

Question 10

Your organization recently updated its data protection policy to comply with new regulations. However, a recent internal audit revealed that several departments are not fully adhering to the policy. How would you address this issue to ensure consistent compliance across the organization?
Response:

A. Enforce immediate penalties on all employees for non-compliance B. Penalize departments that failed the audit C. Disregard the audit results and assume that future compliance will improve on its own D. Conduct targeted training sessions for the non-compliant departments and assign team leads to oversee adherence

Discussion 0

Correct Answer: D Vote an answer

GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT Exam Practice Test