Continuous Improvement GSOM Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the role of cultural reinforcement in sustaining continuous improvement?

   • AIt focuses solely on rewarding individual performance
   • BIt ensures that only management is responsible for improvements
   • CIt encourages employees to embrace improvement as a shared responsibility
   • DIt eliminates the need for formal improvement processes
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security operations team has seen a 30% increase in phishing alerts that are escalated to Tier 2, but the number of confirmed compromises has not changed. The manager wants to understand why so many alerts are being escalated unnecessarily. Which approach best combines root cause analysis with a continuous improvement model to address this issue?

   • AImmediately retrain all Tier 1 analysts on phishing identification to reduce false positives, then monitor the escalation rate for one month.
   • BConduct a 5 Whys session to trace the escalation decision back to its source, then use DMAIC to define, measure, analyze, improve, and control the triage process.
   • CIncrease the threshold for phishing alerts so only high-confidence alerts are generated, reducing the volume of escalations automatically.
   • DImplement a weekly feedback loop where Tier 2 analysts share common mistakes with Tier 1, assuming that improved communication will reduce escalations.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of monitoring the effectiveness of an implemented improvement?

   • ATo assign credit to the team that implemented the change
   • BTo create additional documentation for auditors
   • CTo determine whether the improvement achieved its intended goals
   • DTo justify the original budget request
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security operations manager is establishing a feedback loop to improve the SOC's incident reporting. The manager wants to collect feedback from both the incident response team and the business stakeholders, but these two groups have conflicting preferences: the incident response team wants more technical detail, while the business stakeholders want a high-level summary. The manager has limited time to review feedback. Which approach best balances the conflicting needs while maintaining an effective feedback loop?

   • ACreate two versions of the report (technical and executive) and collect feedback on each from the respective audience.
   • BAsk both groups to compromise on a single report format that is moderately detailed.
   • CCollect feedback only from the business stakeholders because they are the primary consumers of the reports.
   • DUse a single feedback form for both groups and average the results to decide on changes.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security operations manager wants to improve the usability of the SIEM dashboard for the analysts. The manager has collected feedback from the analysts and implemented several changes. To close the feedback loop, what should the manager do next?

   • AWait for the next annual survey to see if analysts are satisfied.
   • BCommunicate the changes to the analysts and ask for their feedback on the updated dashboard.
   • CConsider the feedback process complete since the changes were implemented.
   • DDocument the changes in the system log without informing the analysts.
   Reveal Solution Discussion Select an answer first