Leadership & Change GSTRT Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security organization is merging two teams with different cultures: one is highly process-oriented and the other is highly agile. The merger is intended to create a more flexible yet reliable security function. The leader is using Kotter's model and is at the 'anchoring new approaches in the culture' stage. What should the leader do to ensure the change sticks?

   • AConduct a survey to measure employee satisfaction with the merger and report the results.
   • BCelebrate the successful merger with a team event and then move on to other projects.
   • CRely on the original leaders of both teams to model the new culture without changing any formal processes.
   • DIntegrate the new collaborative behaviors into performance evaluations, promotion criteria, and daily operating norms.
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   A security leader is planning to implement a new security awareness training program that includes simulated phishing attacks. The program is intended to reduce phishing susceptibility, but some employees feel it is deceptive and punitive. The leader must balance the effectiveness of the training with ethical concerns. What is the most ethically sound approach?

   • AOnly run simulations on new employees to avoid upsetting existing staff.
   • BConduct the simulations without prior notice to accurately measure the organization's phishing susceptibility.
   • CUse the simulation results to identify and discipline employees who repeatedly fail.
   • DDesign the simulation program with clear communication about its purpose, ensure it is educational rather than punitive, and provide immediate feedback and additional training for those who fall for the simulation.
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A security organization is undergoing a major transformation from a traditional perimeter-based defense to a zero-trust model. The CISO has a team of highly skilled engineers who are enthusiastic about the technical aspects, but the broader organization is resistant due to the perceived complexity. The CISO must balance the need for technical excellence with organizational buy-in. Which leadership approach is most effective?

   • AUse a servant leadership style, focusing primarily on the needs of the engineering team and trusting that their success will convince the rest of the organization.
   • BUse a situational leadership style, delegating all decisions to the engineering team and focusing only on communication with executives.
   • CAdopt a transformational leadership style, inspiring the entire organization with a clear vision of the zero-trust future while empowering engineers to lead technical implementation.
   • DUse a transactional leadership style, offering rewards to departments that meet zero-trust milestones.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company is implementing a new security awareness training program. Some employees resist because they believe it is a waste of time. The training manager wants to gain buy-in. Which technique is most effective?

   • AOffer a small reward for completing the training, such as a gift card.
   • BDemonstrate how the training helps employees protect their personal data and reduces real-world risks.
   • CReduce the length of the training to minimize disruption, even if it cuts content.
   • DMake the training mandatory and track completion rates to enforce compliance.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A security team is known for being risk-averse and slow to adopt new technologies. The organization wants to become more agile and responsive to emerging threats. Which initiative would most effectively build a change-ready culture?

   • AReward team members who stick to established processes and avoid any deviations.
   • BHire external consultants to redesign all security processes.
   • CCreate a 'security innovation lab' where team members can experiment with new tools on a small scale without fear of failure.
   • DMandate that all team members complete an annual online training on agile methodologies.
   Reveal Solution Discussion Select an answer first