최신GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT무료샘플문제

A. Assign all incident response duties to a single employee to streamline the process

B. Implement a formal incident response plan with clear roles, conduct regular incident response drills, and invest in automated tools to accelerate detection and response

C. Rely solely on external vendors for incident response

D. Ignore the delays since no major breaches have occurred

A. Develop a business case that highlights the potential risks of not securing customer data, present a phased approach to implementation, and demonstrate the long-term value of the program

B. Postpone the security program until the company grows further

C. Eliminate the security program to avoid costs entirely

D. Implement only basic security measures to reduce costs

A. The organization's desire to reduce its workforce

B. Regulatory compliance requirements that the organization must meet

C. Reducing the number of security policies

D. The personal preferences of the security team

A. To monitor policy violations

B. To reduce the need for regular policy updates

C. To ensure transparency and accountability, allowing for periodic review and risk assessment of the exceptions

D. To prevent employees from requesting more exceptions

A. Implement the remote work policy but rely solely on employee trust to maintain security

B. Include security measures such as VPN use, multi-factor authentication (MFA), regular password changes, and endpoint security in the policy, and provide training to remote employees on secure practices

C. Allow remote work without any additional security measures to avoid inconveniencing employees

D. Restrict all remote access and require employees to work only from the office

A. Exploiting outdated firewall settings

B. Installing software updates

C. Social engineering attacks, such as phishing emails containing malicious links or attachments

D. Direct physical access to the victim's device

A. Assume that the cloud service provider will handle all security measures, requiring no input from your organization

B. Limit security controls to basic password requirements and focus on marketing the platform

C. Focus solely on encrypting customer data, leaving other security measures to be determined later

D. Develop a comprehensive policy that includes data encryption, access control, regular security audits, compliance with relevant regulations (e.g., GDPR, CCPA), and third-party vendor security standards