GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT Free Exam Questions

A. To create complex policies that are difficult to understand

B. To make policies flexible enough for employees to interpret them as they wish

C. To ensure policies are regularly updated, enforced, and aligned with organizational goals

D. To establish policies and leave them unchanged for several years

A. The organization's desire to reduce its workforce

B. Regulatory compliance requirements that the organization must meet

C. The personal preferences of the security team

D. Reducing the number of security policies

A. Writing the policy in highly technical terms

B. Limiting the policy to management-level employees

C. Ensuring that the policy is clear, concise, and understandable to all employees

D. Using industry-specific jargon to increase the policy's legitimacy

A. Centralized file storage

B. Physical office visits

C. Video conferencing tools such as Zoom or Microsoft Teams

D. Weekly status reports

A. To ensure the cybersecurity strategy supports business goals and adds value to the organization

B. To prevent the cybersecurity program from receiving excessive funding

C. To allow the security team to work autonomously from business stakeholders

D. To ensure that the cybersecurity strategy operates independently of business objectives

A. Assume that executives will eventually fall victim and focus on remediation

B. Implement targeted phishing awareness training for executives, deploy email filtering and anti-phishing technologies, and establish multi-factor authentication for sensitive accounts

C. Disable all email accounts to prevent phishing attacks

D. Ignore the threat since no successful attacks have occurred yet

A. Ignore the insider threat issue, as it hasn't been a problem in the past

B. Update the program to include measures such as employee background checks, access control monitoring, and security awareness training focused on detecting and preventing insider threats

C. Implement a separate program to handle insider threats without revising the current security program

D. Eliminate all employee access to sensitive systems