GIAC Strategic Planning, Policy, and Leadership (GSTRT)

QUESTION NO: 1
Your organization is planning to adopt a cloud-based solution to manage sensitive customer data. The IT and legal departments have raised concerns about ensuring compliance with existing cybersecurity policies and cloud provider security standards. How would you update your policy management strategy to address these concerns?
Response:

A. Update the policy to include specific security requirements for cloud providers, conduct a risk assessment of the new solution, and ensure the policy covers data protection and compliance measures B. Implement the cloud solution without updating the policy, assuming current policies are sufficient C. Assume the cloud provider will handle all security and compliance responsibilities D. Delay the cloud adoption until all departments fully agree with the decision

Correct Answer: A

QUESTION NO: 2
Why is it important for an organization to understand the motivations of different types of threat actors?
Response:

A. To tailor its cybersecurity strategy to address the specific threats posed by different actors, such as cybercriminals, nation-states, or hacktivists B. To limit investment in security technologies C. To avoid implementing too many security controls D. To hire threat actors as consultants

Correct Answer: A

QUESTION NO: 3
What is the best method to provide constructive feedback to a cybersecurity team member after a project failure?
Response:

A. Discuss their mistakes during a team meeting to provide a learning opportunity for others B. Highlight only the mistakes made during the project C. Send an email summarizing their mistakes and ask them to do better next time D. Schedule a private meeting, focus on areas for improvement, and offer actionable suggestions

Correct Answer: D

QUESTION NO: 4
Which of the following is a common characteristic of insider threats?
Response:

A. They only affect financial systems B. They can only occur in large organizations C. They often involve individuals with legitimate access to critical systems and data D. They are always easy to detect

Correct Answer: C

QUESTION NO: 5
What is the primary role of a cybersecurity leader during a major change initiative, such as a system overhaul or policy shift?
Response:

A. Communicating the change, ensuring alignment, and mitigating resistance B. Solely focusing on budgetary aspects C. Implementing changes without feedback from the team D. Minimizing involvement and allowing the team to self-manage

Correct Answer: A

QUESTION NO: 6
What is a common mistake leaders make when implementing organizational change in cybersecurity?
Response:

A. Over-communicating the benefits of the change B. Encouraging team members to participate in decision-making C. Setting realistic goals and expectations D. Not addressing the concerns and fears of the team members

Correct Answer: D

QUESTION NO: 7
Which communication skill is most important for a leader to possess when addressing a diverse, multi-disciplinary cybersecurity team?
Response:

A. Active listening B. Delegation C. Time management D. Persuasion

Correct Answer: A

QUESTION NO: 8
What is the primary purpose of aligning cybersecurity strategy with an organization's business vision and mission?
Response:

A. To ensure the cybersecurity strategy supports business goals and adds value to the organization B. To ensure that the cybersecurity strategy operates independently of business objectives C. To prevent the cybersecurity program from receiving excessive funding D. To allow the security team to work autonomously from business stakeholders

Correct Answer: A

QUESTION NO: 9
Which type of threat actor is most likely motivated by financial gain?
Response:

A. Hacktivists B. Nation-state actors C. Cybercriminals D. Insider threats

Correct Answer: C

QUESTION NO: 10
What is the importance of understanding the organization's risk tolerance when developing a cybersecurity strategy?
Response:

A. It allows the security team to ignore business concerns B. It ensures that no risks are taken in the organization C. It ensures that security measures align with the organization's willingness to accept certain levels of risk while protecting critical assets D. It simplifies the decision-making process

Correct Answer: C

GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT Exam Questions