Personnel & Training GCIP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A retail company is developing a security training program for its customer service staff, who handle payment card data. The training must be practical and evaluated. Which approach is most effective?

   • AShow a video about the company's security policies and ask staff to sign an attendance sheet.
   • BDistribute a quick reference card with security tips and require staff to keep it at their desks.
   • CProvide interactive, scenario-based training that includes handling suspected phishing emails and proper data protection procedures, followed by a practical assessment.
   • DConduct a one-time lecture on the legal consequences of data breaches.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services firm is implementing a personnel risk assessment program for employees with access to critical financial systems. Which ongoing monitoring practice is most effective for detecting changes in risk?

   • AAnnual re-screening of all employees with access to sensitive systems.
   • BMonitoring employees' social media activity for negative posts.
   • CConducting random drug tests for all employees.
   • DRequiring employees to self-report any changes in their personal circumstances.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A financial institution is hiring a contractor for a six-month project. The contractor will need access to the customer database. The security team is deciding on the level of background check. Which factor is most important in determining the appropriate level of screening?

   • AThe sensitivity of the data the contractor will access and the duration of access.
   • BThe contractor's preference for remote work.
   • CThe contractor's previous experience with similar projects.
   • DThe contractor's hourly rate.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an effective method for evaluating the success of a cybersecurity training program?

   • AConducting pre- and post-training assessments to measure knowledge gain and applying that to job performance.
   • BCounting the number of security incidents reported by employees after training.
   • CRelying on employee self-reports of how much they enjoyed the training.
   • DMeasuring the number of employees who completed the training without regard to their performance.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a typical component of a cybersecurity awareness program?

   • AAnnual simulated phishing campaigns to reinforce recognition of social engineering attempts.
   • BA multi-week instructor-led course on network defense and penetration testing.
   • CA certification exam that validates an employee's expertise in security architecture.
   • DA quarterly review of firewall logs to identify unauthorized access attempts.
   Reveal Solution Discussion Select an answer first