GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which type of threat actor is most likely motivated by financial gain?
Response:

A. Nation-state actors B. Hacktivists C. Cybercriminals D. Insider threats

Discussion 0

Correct Answer: C Vote an answer

Question 2

Your organization has been tasked with developing a comprehensive security program to protect customer data as it expands into new markets. However, the executive team is concerned about the cost of implementing new security measures. How would you approach developing the security program while addressing these concerns?
Response:

A. Eliminate the security program to avoid costs entirely B. Develop a business case that highlights the potential risks of not securing customer data, present a phased approach to implementation, and demonstrate the long-term value of the program C. Postpone the security program until the company grows further D. Implement only basic security measures to reduce costs

Discussion 0

Correct Answer: B Vote an answer

Question 3

When developing a policy for data retention and disposal, which of the following should be the top consideration?
Response:

A. Employee preferences on data storage B. The most cost-effective data storage solution C. Compliance with industry regulations and legal requirements D. The organization's server capacity

Discussion 0

Correct Answer: C Vote an answer

Question 4

How can a leader ensure that complex security policies are clearly communicated to a non-technical audience within an organization?
Response:

A. Simplify the language and focus on the key points that affect the audience B. Avoid discussing technical details altogether C. Use technical jargon to ensure accuracy D. Provide a printed version of the policy for everyone

Discussion 0

Correct Answer: A Vote an answer

Question 5

Your organization is facing a growing number of cyber threats, and you have been tasked with assessing the current security program to identify gaps and areas for improvement. After conducting a risk assessment, you find that the security program does not address recent developments in ransomware protection. What steps should you take to address this issue while aligning the program with the organization's values and risk tolerance?
Response:

A. Allocate the ransomware protection budget to other areas of security B. Delay any updates to the program until a ransomware attack occurs C. Update the security program by implementing ransomware-specific defenses such as frequent data backups, network segmentation, and employee training on phishing attacks D. Ignore ransomware protection since it has not caused any recent incidents

Discussion 0

Correct Answer: C Vote an answer

Question 6

Which of the following describes a zero-day exploit?
Response:

A. A vulnerability that is discovered after the vendor has issued a patch B. An attack that occurs on the first day of a new vulnerability report C. An exploit targeting obsolete systems D. An exploit for which there is no available patch or fix from the software vendor at the time of the attack

Discussion 0

Correct Answer: D Vote an answer

Question 7

What is the benefit of aligning cybersecurity policies with international standards such as ISO 27001?
Response:

A. It increases the complexity of the policy B. It ensures the policy meets global best practices and enhances the organization's credibility C. It limits the organization's flexibility to adopt emerging technologies D. It reduces the need for internal audits

Discussion 0

Correct Answer: B Vote an answer

Question 8

Why is it important for an organization to understand the motivations of different types of threat actors?
Response:

A. To limit investment in security technologies B. To avoid implementing too many security controls C. To hire threat actors as consultants D. To tailor its cybersecurity strategy to address the specific threats posed by different actors, such as cybercriminals, nation-states, or hacktivists

Discussion 0

Correct Answer: D Vote an answer

Question 9

What is a key factor in ensuring the successful implementation of cybersecurity policies across an organization?
Response:

A. Providing training and resources to all employees, ensuring they understand and comply with the policies B. Delegating policy implementation to the IT department exclusively C. Only addressing cybersecurity policies in technical departments D. Limiting policy access to only senior management

Discussion 0

Correct Answer: A Vote an answer