Personnel & Training GCIP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An employee is leaving a company. The security team is performing offboarding. Which action is most critical to ensure the employee no longer has access to company resources?

   • ASend a farewell email to all staff announcing the employee's departure.
   • BChange the employee's email signature to indicate they are no longer with the company.
   • CCollect the employee's laptop and mobile phone at the end of the week.
   • DDisable the employee's network account and revoke all access badges immediately upon termination.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A government contractor is required to ensure that all personnel understand their security responsibilities before accessing classified systems. The program must include initial and annual refresher content, and completion must be tracked. Which approach best meets this requirement?

   • ARequire employees to sign a security policy acknowledgment annually without any formal instruction.
   • BSend a monthly email newsletter with security tips and ask employees to confirm they read it.
   • CImplement a formal cybersecurity training program with role-based modules and a learning management system to track completion.
   • DPost security posters in common areas and include security reminders in company meetings.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A utility company has a mature security awareness program that includes monthly phishing simulations and quarterly newsletters. However, the company is still experiencing incidents where employees share sensitive information over the phone with unauthorized callers. The security team wants to improve the program. Which enhancement is most likely to address this specific issue?

   • AReplace the awareness program with a formal training course on information security.
   • BImplement a technical control that blocks all incoming phone calls from unknown numbers.
   • CAdd targeted training and simulations for social engineering, including vishing (phone phishing) scenarios, with feedback.
   • DIncrease the frequency of phishing simulations to weekly.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key factor in assessing personnel risk during the hiring process?

   • AThe candidate's social media activity.
   • BThe candidate's previous job titles and employment history.
   • CThe candidate's preferred method of communication.
   • DThe candidate's credit history and criminal record.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A large organization is implementing an access management program. The organization has a high turnover rate and many employees change roles frequently. The security team is concerned about 'access creep,' where employees accumulate unnecessary permissions over time. Which combination of practices is most effective in preventing access creep?

   • AUsing a single administrator account for all access changes to ensure consistency.
   • BAutomated provisioning and deprovisioning based on role changes, and periodic access recertification by managers.
   • CGranting all employees the same baseline access to simplify management.
   • DAnnual manual review of all user access by the IT department.
   Reveal Solution Discussion Select an answer first