Personnel & Training GCIP Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A critical infrastructure organization is expanding its workforce rapidly. The HR department wants to speed up hiring by reducing background checks to a simple criminal record search. The security team objects. Which argument best justifies the need for a more comprehensive personnel risk assessment?

   • AComprehensive checks are faster than criminal record searches.
   • BComprehensive checks reduce the risk of insider threats by identifying financial stressors and conflicts of interest.
   • CComprehensive checks eliminate all insider threats.
   • DComprehensive checks are required by all industry regulations.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A technology company is designing a training program for employees who handle customer data. The program must ensure that employees understand data privacy regulations. Which training approach is most effective for this audience?

   • AScenario-based e-learning that presents real-world situations and asks employees to choose the correct response.
   • BA lecture-style presentation covering all relevant laws and penalties.
   • CA reading assignment of the company's privacy policy followed by a quiz.
   • DAn annual email reminder about data privacy responsibilities.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A regional bank must ensure that all employees understand their role in protecting customer data. The compliance team is designing a training program. They have limited budget and need to train both remote and branch employees. Which approach best balances effectiveness and reach?

   • AOffer an optional lunch-and-learn session for interested employees.
   • BDeploy a role-based e-learning module with scenario-based assessments, and track completion by job function.
   • CProvide a printed handbook and require employees to sign an acknowledgment that they read it.
   • DConduct a single all-hands webinar that covers general security awareness for all employees.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A manufacturing company has an employee who is transferring from the finance department to the logistics department. The security team is managing the access change. Which action best aligns with least privilege and need-to-know?

   • AKeep the finance access temporarily in case the employee needs to assist with pending tasks.
   • BGrant the same level of access as the previous logistics employee without review.
   • CGrant access to all systems in the logistics department to ensure the employee can perform any task.
   • DRevoke all finance-related access and grant only the access required for the logistics role.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A manufacturing company has a policy that employees should only have access to the systems and data necessary for their current role. An engineer transfers from the R&D department to the production support team. The IT administrator is updating the engineer's access. Which action aligns with the access management program?

   • ARemove the engineer's R&D access and grant only the permissions required for production support.
   • BKeep the R&D access and add production support permissions to avoid disrupting the engineer's work.
   • CGrant the engineer the same access as the most senior production support engineer.
   • DAsk the engineer which access they think they need and grant that access.
   Reveal Solution Discussion Select an answer first