Security Foundations and Awareness GISF Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization is developing a new security policy for remote work. The policy must be enforceable and practical. Which component is essential for the policy to be effective?

   • AA detailed list of every possible threat scenario
   • BA recommendation to use the latest technology without specifying requirements
   • CA statement of management support and consequences for non-compliance
   • DA list of security personnel responsible for implementing the policy
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An organization is developing a security policy for acceptable use of company devices. The policy must be clear and enforceable. Which element is most important to include?

   • AA recommendation that employees use common sense when using devices
   • BA list of security team members and their contact information
   • CA list of prohibited activities and the consequences for violations
   • DA description of the latest security technologies available
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A manufacturing company is developing a new data classification policy. The policy must define how employees should handle sensitive design documents. According to best practices, what should the policy include to ensure consistent implementation?

   • AA list of approved software tools for document creation.
   • BSpecific procedures for labeling, storing, and sharing sensitive documents.
   • CA general statement that employees should use good judgment when handling documents.
   • DThe names of employees responsible for enforcing the policy.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization is updating its security policy to address the use of personal mobile devices for work. The policy must be enforceable and clear. Which component is essential to include?

   • AA recommendation to avoid using personal devices for work.
   • BSpecific rules for device encryption, screen locks, and approved apps.
   • CA general statement encouraging employees to be secure.
   • DA list of all employees who use personal devices.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following topics is commonly covered in security awareness training?

   • AHow to configure a network firewall
   • BHow to perform a vulnerability scan
   • CHow to recognize and report phishing emails
   • DHow to write secure code in Python
   Reveal Solution Discussion Select an answer first