Security Foundations and Awareness GISF Practice Questions (Page 8)

Questions 36–38

1. 36foundation · easy

   Which role is ultimately responsible for ensuring that an organization has appropriate security policies and resources?

   • AEnd users
   • BIT help desk staff
   • CSenior management
   • DSecurity analysts
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A company is implementing a new security program. The program requires the involvement of multiple roles. Which allocation of responsibilities is most effective?

   • AManagement is responsible for all security operations
   • BManagement sets the risk appetite, security personnel implement controls, and users follow policies
   • CUsers are responsible for implementing security controls
   • DThe security team is solely responsible for all security decisions and actions
   Reveal Solution Discussion Select an answer first
3. 38expert · hard

   A financial institution is designing a new online banking system. The system must ensure that transaction records cannot be altered after they are posted. Which control is most important to implement?

   • AUse multi-factor authentication for customers.
   • BImplement write-once, read-many (WORM) storage for transaction logs.
   • CEncrypt all transaction data in transit.
   • DEnsure the system has high availability with redundant servers.
   Reveal Solution Discussion Select an answer first