A financial services firm is planning its annual security awareness training. The training program must address the most common human-related risks observed in the industry. Which topic should be the highest priority?

How to identify and report phishing emails

How to write secure code in Python

How to configure firewall rules

How to perform penetration testing

A retail company has a high turnover of part-time staff. The security team wants to ensure that new employees understand their role in protecting customer data. What is the most effective way to achieve this?

Send a one-time email to all employees reminding them to be careful with customer data.

Provide security training only to managers and supervisors.

Rely on the IT helpdesk to answer security questions as they arise.

Require all new hires to complete security awareness training before accessing systems.

A healthcare organization has experienced several incidents where employees clicked on phishing emails, leading to malware infections. The security team wants to reduce this human-related risk. Which approach would be most effective as a first step?

Implement a security awareness program that includes simulated phishing exercises and regular training.

Purchase an advanced email filtering solution and deploy it immediately.

Disable all email links and attachments for every employee.

Terminate employees who click on phishing emails to deter others.

GIAC Information Security Fundamentals

Domain 1Objective 3

Security Foundations and Awareness GISF Practice Questions (Page 7)

Part of the Foundations and Risk Management domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

5concepts

Questions 31–35

31application · medium
A financial services firm is planning its annual security awareness training. The training program must address the most common human-related risks observed in the industry. Which topic should be the highest priority?
Select an answer first
32application · medium
A retail company has a high turnover of part-time staff. The security team wants to ensure that new employees understand their role in protecting customer data. What is the most effective way to achieve this?
Select an answer first
33application · medium
A healthcare organization has experienced several incidents where employees clicked on phishing emails, leading to malware infections. The security team wants to reduce this human-related risk. Which approach would be most effective as a first step?
Select an answer first
34foundation · easy
After implementing a new firewall to reduce the risk of unauthorized network access, what is the next step in the risk management process?
Select an answer first
35application · medium
A company is implementing a new security awareness program. The program requires all employees to complete training and pass a quiz. Which role is responsible for ensuring that employees complete the training?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISF

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISF” is a trademark of its owner, used for identification only.

Security Foundations and Awareness GISF Practice Questions (Page 7)

Questions 31–35

A financial services firm is planning its annual security awareness training. The training program must address the most common human-related risks observed in the industry. Which topic should be the highest priority?

A retail company has a high turnover of part-time staff. The security team wants to ensure that new employees understand their role in protecting customer data. What is the most effective way to achieve this?

A healthcare organization has experienced several incidents where employees clicked on phishing emails, leading to malware infections. The security team wants to reduce this human-related risk. Which approach would be most effective as a first step?

After implementing a new firewall to reduce the risk of unauthorized network access, what is the next step in the risk management process?

A company is implementing a new security awareness program. The program requires all employees to complete training and pass a quiz. Which role is responsible for ensuring that employees complete the training?

Keep studying — Foundations and Risk Management