Security and Risk Management GISP Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A healthcare organization is onboarding a new cloud-based billing vendor that will process protected health information (PHI). The organization's compliance team requires assurance that the vendor meets HIPAA obligations. Which action should the organization take FIRST?

   • ARequire the vendor to sign a non-disclosure agreement (NDA).
   • BExecute a business associate agreement (BAA) with the vendor.
   • CConduct a security assessment of the vendor's controls and practices.
   • DReview the vendor's SOC 2 Type II report after the contract is signed.
   Reveal Solution Discussion Select an answer first
2. 47application · easy

   A security analyst detects unusual network traffic indicating a possible data exfiltration. The incident response plan requires immediate containment. Which action should the analyst take FIRST?

   • ADelete the suspicious network logs to prevent further spread.
   • BNotify the public relations department.
   • CConduct a full forensic analysis of the affected systems.
   • DIsolate the affected systems from the network.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which of the following is a common activity in third-party risk management?

   • AWriting security policies for the vendor
   • BPerforming penetration tests on the vendor's customers
   • CConfiguring vendor firewalls
   • DConducting security assessments of vendors before onboarding
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A manufacturing company is implementing a new security policy for remote access. The policy states that all remote connections must use multi-factor authentication (MFA). The IT help desk reports that many employees are struggling with the new MFA app and are calling for support. The security manager wants to maintain the policy's intent while reducing friction. What is the most appropriate action?

   • AReplace the MFA app with a different vendor without notifying users.
   • BCreate a detailed procedure and quick-reference guide for the MFA app and provide additional training sessions.
   • CTemporarily disable MFA for employees who have called the help desk more than once.
   • DRevise the policy to allow MFA only for users accessing sensitive systems.
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A company has a mature security awareness program with monthly phishing simulations. The click rate has plateaued at 8% for the past six months. The security team wants to further reduce the click rate. Which approach is most likely to achieve a further reduction?

   • AAnalyze the characteristics of employees who click and provide targeted training to those groups.
   • BReplace the phishing simulation vendor with a different one.
   • CIncrease the frequency of simulations from monthly to weekly.
   • DStop the simulations and focus on other security awareness topics.
   Reveal Solution Discussion Select an answer first