Managing the Program Structure GSLC Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an appropriate communication channel for reporting security program status to executives?

   • AA hallway conversation
   • BA technical blog post
   • CA quarterly executive dashboard summarizing key metrics
   • DA social media announcement
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is an example of a security program resource?

   • ACorporate branding guidelines
   • BMarketing collateral
   • CSecurity personnel
   • DOffice furniture
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Why is it important to assign clear roles and responsibilities for security program stakeholders?

   • ATo eliminate the need for security policies
   • BTo comply with all international standards automatically
   • CTo reduce the number of security personnel needed
   • DTo ensure accountability and avoid gaps or overlaps in security duties
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a compliance requirement that might affect security program structure?

   • AA marketing guideline for social media posts
   • BA financial target for quarterly revenue
   • CA regulation requiring data protection impact assessments for certain projects
   • DA company policy on office dress code
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A global bank operates in multiple jurisdictions with conflicting data retention regulations. One jurisdiction requires retaining transaction records for 10 years, while another requires deletion after 5 years. The bank's security program must incorporate these requirements into its data governance structure. Which approach best addresses this regulatory conflict?

   • ADelete all data after 5 years globally to comply with the shorter requirement.
   • BImplement a data classification and retention scheme that applies different retention periods based on the jurisdiction of the data subject and transaction.
   • CStore data in a third country with no conflicting regulations and apply a single retention period.
   • DRetain all data for 10 years globally to satisfy the strictest requirement.
   Reveal Solution Discussion Select an answer first