Leadership & Change GSTRT Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A CISO is planning to migrate the organization's email system to a new cloud provider. Employees have expressed concerns about data privacy and job security. The CISO needs to communicate the change to reduce resistance. Which communication strategy is most effective?

   • AAnnounce the change at a town hall, then follow up with a detailed FAQ document addressing privacy and job impact.
   • BPost the change on the company intranet and expect employees to read it on their own.
   • CSend a brief email stating the change is happening and that further details will be provided after implementation.
   • DShare the change only with managers and ask them to communicate it to their teams informally.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   In Kotter's 8-step change model, what is the primary purpose of the first step, 'Create a sense of urgency'?

   • ATo develop a detailed project plan
   • BTo generate buy-in and motivation for change
   • CTo communicate the new vision
   • DTo build a guiding coalition
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An organization has successfully implemented a new security incident response process. However, after a few months, the team is reverting to old habits. The leader wants to sustain the change. What is the most effective action?

   • AMove on to other projects and trust that the team has internalized the change.
   • BSend a reminder email to the team about the new process.
   • CAssume the team will follow the process because it was approved by management.
   • DIntegrate the new process into performance reviews and reward adherence to it.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A security organization is adopting a DevSecOps model, which requires developers, operations, and security teams to collaborate closely. The change is significant and affects daily workflows. The leader wants to use Lewin's change management model. What should the leader do during the 'unfreezing' stage?

   • AImplement new collaboration tools and train teams on their use.
   • BCelebrate early successes and share them across the organization.
   • CEstablish new performance metrics and reward systems to support the new model.
   • DCommunicate the need for change by highlighting the risks of the current siloed approach and the benefits of collaboration.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A large enterprise is adopting a new zero-trust architecture. The network security team is resisting because they fear losing control and relevance. The CISO has limited time and budget. Which strategy is most effective to overcome this resistance while respecting the team's expertise?

   • ACreate a working group of network security team members to co-design the zero-trust roadmap, with the CISO as sponsor.
   • BMandate the change with a strict deadline and tie bonuses to compliance.
   • COutsource the zero-trust implementation to a vendor to avoid internal conflict.
   • DFocus on training the team on zero-trust technologies before addressing their concerns.
   Reveal Solution Discussion Select an answer first