Security Management Controls GCIP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A manufacturing company is drafting a new security policy for remote access. The policy must be enforceable and align with governance. Which component is essential to include in the policy document to ensure it is actionable?

   • AThe roles and responsibilities of users and administrators
   • BThe IP address range of the corporate network
   • CThe brand of firewall used at the perimeter
   • DA list of approved VPN vendors
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of a security policy in an organization's governance framework?

   • ATo list the exact technical steps for configuring a firewall
   • BTo replace the need for any other security documentation
   • CTo serve as a legally binding contract between the organization and its customers
   • DTo provide a high-level statement of management intent that directs and supports the organization's security program
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A low-impact facility is located in a high-crime area. The facility manager wants to increase security but has a very limited budget. The facility has a single entrance and no security personnel. Which control provides the best balance of cost and effectiveness?

   • AHire a part-time security guard during business hours
   • BInstall a CCTV system with remote viewing
   • CInstall high-quality locks and reinforce the entrance door
   • DInstall a monitored alarm system with a central station
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company operates a high-impact data center and several low-impact branch offices. The security manager proposes a single, uniform security policy for all locations to simplify management. The senior manager must decide. What is the most appropriate decision?

   • AReject the uniform policy and require each facility to develop its own policy independently
   • BApprove the uniform policy because it ensures consistent security across all locations
   • CApprove a single high-level policy with facility-specific control baselines
   • DReject the uniform policy and require separate policies for each facility type
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A low-impact facility has a single server room that contains non-critical equipment. The facility manager wants to implement a security control that is cost-effective and easy to maintain. Which control is most appropriate?

   • ADeploy a full CCTV system covering the server room
   • BUse a standard key lock and maintain an access log
   • CRequire two-person integrity for all server room access
   • DInstall a biometric lock on the server room door
   Reveal Solution Discussion Select an answer first