Security Management Controls GCIP Practice Questions (Page 9)

Questions 41–43

1. 41expert · hard

   A company operates a low-impact facility that is leased. The lease agreement requires the company to follow the landlord's security rules, which are less stringent than the company's own policy. What should the company do?

   • AFollow the landlord's rules because they are contractually binding
   • BAsk the landlord to take over all security management
   • CIgnore both policies and implement no controls
   • DApply the company's stricter policy and negotiate with the landlord if needed
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A logistics company operates a low-impact warehouse that stores no sensitive data. The warehouse manager is responsible for security but has no formal security training. According to security management controls, what is the primary responsibility of the warehouse manager?

   • AConducting forensic investigations of any security breach
   • BImplementing the security policy and reporting security incidents
   • CWriting the organization-wide security policy
   • DPurchasing and configuring all security hardware
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   An organization is revising its security policies. The current policy document is 50 pages long and contains detailed configuration settings. Employees find it difficult to locate relevant requirements. What is the best approach to improve the policy structure?

   • AReduce the document to a single page of general statements
   • BMove all content to an internal wiki with no formal approval process
   • CSplit the document into a high-level policy and separate technical standards
   • DKeep the document as is but add a searchable index
   Reveal Solution Discussion Select an answer first