Continuous Improvement GSOM Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a key component of executing an improvement plan?

   • ADeferring all training until after the plan is complete
   • BAvoiding any disruption to operations
   • CIgnoring stakeholder feedback
   • DManaging change effectively
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which practice helps sustain continuous improvement in a security operations team?

   • ADiscouraging feedback from junior staff
   • BFocusing only on major annual changes
   • CEliminating all training to save time
   • DConducting regular performance reviews and retrospectives
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security operations manager is planning to implement a major change to the incident response workflow. The change is technically sound but will require analysts to learn a new tool and alter their daily routines. The team is already under pressure from a high volume of incidents. The manager wants to minimize disruption while ensuring the change is adopted. Which approach is most effective?

   • AAnnounce the change and require full compliance within one week to get it done quickly.
   • BRun a pilot with a small group of analysts, gather their feedback, and then roll out the change in phases.
   • CDelay the change until the incident volume decreases, without a specific timeline.
   • DProvide training only to the most senior analysts and expect them to teach the rest of the team.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security operations team is struggling with a recurring issue where critical alerts are not escalated during shift changes. The manager wants to use a structured improvement model that emphasizes small, incremental changes and involves all team members in suggesting improvements. Which model is most appropriate?

   • ARoot cause analysis, which is a technique for identifying underlying causes.
   • BPDCA, which is a four-step cycle for testing changes.
   • CDMAIC, which is a five-phase data-driven improvement process.
   • DKaizen, which focuses on continuous small improvements through the involvement of all employees.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security operations team has experienced repeated delays in incident response because the on-call analyst is often not aware of the latest playbook updates. The manager suspects the root cause is not the playbook content but how updates are communicated. Which root cause analysis technique would best validate this hypothesis?

   • AControl chart to monitor the response time over time and identify trends.
   • B5 Whys, asking 'why' repeatedly until reaching the underlying cause of the delays.
   • CFishbone diagram that categorizes potential causes into people, process, technology, and communication, then investigates the communication category.
   • DPareto analysis to identify which playbook updates are most frequently missed.
   Reveal Solution Discussion Select an answer first