A CISO is leading a change to move from on-premises data centers to a hybrid cloud model. The infrastructure team is resistant because they fear losing control and job security. The CISO has limited time to present the change to the board. What is the most effective communication strategy to address both the board's and the team's concerns?

Give a single presentation to both the board and the infrastructure team to save time.

Announce the change via email to all stakeholders, including the board and the team, to ensure consistency.

Focus on the technical benefits of hybrid cloud in the board presentation, as the board is technical.

Present a business case to the board that highlights cost savings and agility, and hold separate listening sessions with the infrastructure team.

A CISO is leading a change to consolidate multiple security tools into a single platform. Mid-level managers are resistant because they fear losing control over their teams' tools and budgets. What communication approach should the CISO use to address this resistance?

Send a company-wide email announcing the consolidation and its benefits.

Delegate communication to the project manager to handle all manager questions.

Hold private meetings with each manager to understand their specific concerns and explain how the consolidation will benefit their teams.

Present the consolidation as a non-negotiable executive decision and discourage questions.

A security team is composed of junior analysts who need clear direction and a senior engineer who is highly autonomous. The team lead must manage both effectively. Which leadership approach is most appropriate?

Apply the same leadership style to all team members to ensure fairness and consistency.

Use a directive style with everyone to ensure compliance with security policies.

Adopt a participative style, allowing the team to make all decisions collectively.

Use a situational approach, providing more structure to the junior analysts and more autonomy to the senior engineer.

A security team has a culture that values stability and predictability, which has led to strong operational performance but slow adoption of new technologies. The organization now faces a rapidly evolving threat landscape and needs to become more agile. The CISO wants to build a change-ready culture without sacrificing operational stability. What is the best approach?

Introduce a 'safe-to-fail' experimentation framework that allows teams to test new approaches in isolated environments while maintaining strict controls on production systems.

Mandate that all teams adopt agile methodologies immediately, regardless of their current processes.

Reward teams that maintain the status quo and avoid any experimentation.

Focus exclusively on improving operational stability and defer any changes until the threat landscape stabilizes.

An organization is merging two security teams with different processes and tools. The merger is expected to cause anxiety and uncertainty. The program leader wants to sustain the change over the long term. What is the most important action for the leader to take?

Focus on integrating the technical systems first, as that is the most tangible aspect.

Assign a single leader to make all decisions to ensure consistency.

Communicate a clear vision of the merged team's future and celebrate early wins.

Keep the two teams separate until the merger is fully approved by executives.

GIAC Strategic Planning, Policy, and Leadership

Domain 1Objective 2

Leadership & Change GSTRT Practice Questions (Page 1)

Part of the Leadership and Communication domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~20–35 in this domain), expect 10–18 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

6concepts

Questions 1–5

1expert · hard
A CISO is leading a change to move from on-premises data centers to a hybrid cloud model. The infrastructure team is resistant because they fear losing control and job security. The CISO has limited time to present the change to the board. What is the most effective communication strategy to address both the board's and the team's concerns?
Select an answer first
2application · medium
A CISO is leading a change to consolidate multiple security tools into a single platform. Mid-level managers are resistant because they fear losing control over their teams' tools and budgets. What communication approach should the CISO use to address this resistance?
Select an answer first
3application · medium
A security team is composed of junior analysts who need clear direction and a senior engineer who is highly autonomous. The team lead must manage both effectively. Which leadership approach is most appropriate?
Select an answer first
4expert · hard
A security team has a culture that values stability and predictability, which has led to strong operational performance but slow adoption of new technologies. The organization now faces a rapidly evolving threat landscape and needs to become more agile. The CISO wants to build a change-ready culture without sacrificing operational stability. What is the best approach?
Select an answer first
5application · medium
An organization is merging two security teams with different processes and tools. The merger is expected to cause anxiety and uncertainty. The program leader wants to sustain the change over the long term. What is the most important action for the leader to take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.