What is the primary goal of business continuity planning (BCP)?

To prevent all security incidents from occurring

To transfer risks to third-party vendors

To ensure critical business operations continue during and after a disruption

To restore IT systems and infrastructure after a disaster

An organization is developing a new security policy for remote work. The policy must be enforceable and support the business goal of flexible work arrangements. Which element is most important to include in the policy?

A list of acceptable remote work locations.

A clear statement of management support and the policy's purpose.

A statement that all remote work must be approved by the IT department.

Specific technical controls, such as VPN requirements and device encryption.

A security manager is developing a dashboard for the executive team. The dashboard should show the effectiveness of the security program. The executives are busy and prefer a small number of key performance indicators (KPIs). Which set of metrics would be most useful for the executives?

Number of firewall rules, total storage capacity, and number of servers.

Percentage of employees who completed training, number of security tools deployed, and total security budget.

Number of vulnerabilities discovered, number of vulnerabilities fixed, and number of vulnerabilities remaining.

Number of security incidents, percentage of systems patched, and time to patch critical vulnerabilities.

GIAC Information Security Professional

Domain 1Objective 1

Security and Risk Management GISP Practice Questions (Page 5)

Part of the Security Management and Risk domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 12–20 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

Questions 21–25

21foundation · easy
What is the primary goal of business continuity planning (BCP)?
Select an answer first
22application · medium
An organization is developing a new security policy for remote work. The policy must be enforceable and support the business goal of flexible work arrangements. Which element is most important to include in the policy?
Select an answer first
23foundation · easy
Which step in the risk management process involves evaluating the likelihood and impact of identified risks to determine their level of risk?
Select an answer first
24foundation · easy
Which type of security document provides the specific technical details or mandatory requirements for implementing a security control?
Select an answer first
25expert · hard
A security manager is developing a dashboard for the executive team. The dashboard should show the effectiveness of the security program. The executives are busy and prefer a small number of key performance indicators (KPIs). Which set of metrics would be most useful for the executives?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Security and Risk Management GISP Practice Questions (Page 5)

Questions 21–25

What is the primary goal of business continuity planning (BCP)?

An organization is developing a new security policy for remote work. The policy must be enforceable and support the business goal of flexible work arrangements. Which element is most important to include in the policy?

Which step in the risk management process involves evaluating the likelihood and impact of identified risks to determine their level of risk?

Which type of security document provides the specific technical details or mandatory requirements for implementing a security control?

A security manager is developing a dashboard for the executive team. The dashboard should show the effectiveness of the security program. The executives are busy and prefer a small number of key performance indicators (KPIs). Which set of metrics would be most useful for the executives?

Keep studying — Security Management and Risk