A government contractor is required to provide annual security awareness training to all employees. The training must cover insider threat indicators and reporting procedures. Which delivery method would be most effective for reinforcing the material throughout the year?

A poster campaign in the office with key indicators.

An online course with a final exam that must be passed with 90%.

Monthly email newsletters with short tips and a quarterly quiz.

A single, comprehensive 8-hour classroom session.

What is the primary purpose of a cybersecurity awareness program in an organization?

To provide specialized, role-based instruction that certifies employees in advanced security technologies and procedures.

To enforce compliance with security policies by automatically monitoring and penalizing employees who violate them.

To test employees' technical proficiency in identifying and responding to sophisticated cyber threats.

To change employee behavior and reduce risky actions by ensuring they understand and apply basic security practices in their daily work.

A company has a high rate of employees falling for phishing emails. The security team wants to implement a program that will change employee behavior over time. Which approach is most aligned with an awareness program?

Create a policy that employees who click on phishing emails will be disciplined.

Send monthly simulated phishing emails and provide immediate, targeted feedback to employees who click.

Add a phishing module to the annual compliance training and require a passing score.

Post a warning about phishing on the company intranet homepage.

A software development company has a policy that developers should not have production access. However, a developer needs to view production logs to troubleshoot an issue. What is the most appropriate action?

Provide the developer with full production access to avoid future requests.

Have the developer ask a colleague to copy the logs and share them.

Deny the request and tell the developer to work without the logs.

Grant temporary, time-limited read-only access to the specific logs, and revoke it after the issue is resolved.

A company is designing a cybersecurity training program for its employees. The program must be effective for a diverse workforce, including employees with disabilities and non-native speakers. The company also needs to measure the effectiveness of the training. Which approach best meets these requirements?

Use a single, standardized training video for all employees to ensure consistency.

Conduct training only in English and require all employees to pass a written exam.

Provide training materials in multiple languages but do not assess learning.

Provide training in multiple formats (e.g., video, text, interactive) with accessibility features, and use pre- and post-training assessments to measure learning.

GIAC Critical Infrastructure Protection (GCIP)

Domain 3Objective 2

Personnel & Training GCIP Practice Questions (Page 1)

Part of the Physical and Personnel Security domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

4concepts

Questions 1–5

1application · medium
A government contractor is required to provide annual security awareness training to all employees. The training must cover insider threat indicators and reporting procedures. Which delivery method would be most effective for reinforcing the material throughout the year?
Select an answer first
2foundation · easy
What is the primary purpose of a cybersecurity awareness program in an organization?
Select an answer first
3application · medium
A company has a high rate of employees falling for phishing emails. The security team wants to implement a program that will change employee behavior over time. Which approach is most aligned with an awareness program?
Select an answer first
4application · medium
A software development company has a policy that developers should not have production access. However, a developer needs to view production logs to troubleshoot an issue. What is the most appropriate action?
Select an answer first
5expert · hard
A company is designing a cybersecurity training program for its employees. The program must be effective for a diverse workforce, including employees with disabilities and non-native speakers. The company also needs to measure the effectiveness of the training. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIP” is a trademark of its owner, used for identification only.