Security Management Controls GCIP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A small retail store is classified as a low-impact facility. The store has a single alarm system and a basic access control policy. Management wants to add security controls without overburdening staff. Which control should be prioritized for this facility?

   • AInstall biometric access controls on all interior doors
   • BRequire all employees to undergo annual background checks
   • CDeploy a full video surveillance system with 24/7 monitoring
   • DImplement a visitor log and escort policy
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an appropriate security management control for a low-risk facility?

   • ADeploying a Security Operations Center (SOC) to monitor the facility 24/7
   • BInstalling a mantrap with interlocking doors at the main entrance
   • CRequiring all visitors to be escorted by security personnel at all times
   • DImplementing a visitor log and a simple lock-and-key access system
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A municipal government has a low-impact public library and a high-impact data center. The library manager wants to implement the same security controls as the data center. Which action should the security manager take?

   • AApprove the request to ensure consistent security across all facilities
   • BEscalate the request to the senior manager for a final decision
   • CRequire the library to conduct a full risk assessment before any controls are implemented
   • DDeny the request and require the library to implement only the controls specified for low-impact facilities
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A low-impact facility has a senior manager who is also the facility's only employee. The manager is responsible for security but also has operational duties. How should the organization ensure security management controls are still effective?

   • AHire a second employee solely for security
   • BEliminate security controls because the facility is low-impact
   • CRely on the manager to handle security as part of their duties
   • DAssign security oversight to a remote corporate security team
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A financial services firm is establishing a security governance structure. The CEO wants to ensure that security decisions are aligned with business objectives. Which practice best supports this alignment?

   • AMaking security policies confidential to avoid scrutiny
   • BOutsourcing security management to a third-party vendor
   • CHaving the CISO report directly to the CEO and participate in board meetings
   • DDelegating all security decisions to the IT department
   Reveal Solution Discussion Select an answer first