A small nonprofit organization handles donor personal information. They have not yet implemented an information protection program. The board wants a cost-effective approach that still protects donor data. What is the first step they should take?

Hire a full-time security officer

Encrypt all laptops immediately

Purchase a data loss prevention (DLP) suite

Create an information inventory and classify the data

A city government is classifying its information assets. The records include: (1) a public bus schedule, (2) employee salary information, (3) a draft emergency response plan that is not yet public, and (4) law enforcement investigation files. Which classification scheme is most appropriate?

Public, Confidential, Secret, Top Secret

Unclassified, Sensitive, Classified

Public, Internal, Confidential, Restricted

A government agency is implementing a classification scheme for its documents. The agency has three categories: Public, Official, and Secret. A document contains details about a new public transportation project, including planned routes and budget figures. The budget figures are not yet approved and could cause public concern if released early. Which classification should the document receive?

Official, because it is not secret but should be controlled until the budget is approved

Public, because the project is public knowledge

Secret, because budget figures are always sensitive

No classification, because it is a government document

Which of the following is an example of an administrative safeguard for protecting classified information?

Implementing a mandatory security awareness training program

Deploying a data loss prevention (DLP) system

Installing a biometric access control system

GIAC Critical Infrastructure Protection (GCIP)

Domain 5Objective 2

Information Protection GCIP Practice Questions (Page 6)

Part of the Recovery and Information Protection domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 6–9 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

6concepts

Questions 26–30

26application · medium
A small nonprofit organization handles donor personal information. They have not yet implemented an information protection program. The board wants a cost-effective approach that still protects donor data. What is the first step they should take?
Select an answer first
27foundation · easy
Which of the following is a common example of an information classification label?
Select an answer first
28application · medium
A city government is classifying its information assets. The records include: (1) a public bus schedule, (2) employee salary information, (3) a draft emergency response plan that is not yet public, and (4) law enforcement investigation files. Which classification scheme is most appropriate?
Select an answer first
29expert · hard
A government agency is implementing a classification scheme for its documents. The agency has three categories: Public, Official, and Secret. A document contains details about a new public transportation project, including planned routes and budget figures. The budget figures are not yet approved and could cause public concern if released early. Which classification should the document receive?
Select an answer first
30foundation · easy
Which of the following is an example of an administrative safeguard for protecting classified information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.

Information Protection GCIP Practice Questions (Page 6)

Questions 26–30

A small nonprofit organization handles donor personal information. They have not yet implemented an information protection program. The board wants a cost-effective approach that still protects donor data. What is the first step they should take?

Which of the following is a common example of an information classification label?

A city government is classifying its information assets. The records include: (1) a public bus schedule, (2) employee salary information, (3) a draft emergency response plan that is not yet public, and (4) law enforcement investigation files. Which classification scheme is most appropriate?

Which of the following is an example of an administrative safeguard for protecting classified information?

Keep studying — Recovery and Information Protection