Which event should trigger a review of a security policy?

A significant security incident

The anniversary of the policy's creation only

A government agency is developing a policy for handling classified information. The policy must ensure that data is not altered during transmission and that only authorized personnel can access it. Which combination of security principles should the policy emphasize?

Defense in depth and availability, with multiple layers of controls and redundancy.

Confidentiality and accountability, with controls for encryption and user activity monitoring.

Integrity and confidentiality, with specific controls for data validation and access restrictions.

Availability and non-repudiation, with controls for system uptime and audit logging.

GIAC Strategic Planning, Policy, and Leadership

Domain 2Objective 1

Policy Development GSTRT Practice Questions (Page 4)

Part of the Policy and Program Management domain, which makes up ~45% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~32–54 in this domain), expect 8–14 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 16–20

16foundation · easy
Which event should trigger a review of a security policy?
Select an answer first
17application · medium
A government agency is developing a policy for handling classified information. The policy must ensure that data is not altered during transmission and that only authorized personnel can access it. Which combination of security principles should the policy emphasize?
Select an answer first
18foundation · easy
In a typical security documentation hierarchy, which document provides the specific step-by-step actions required to complete a task?
Select an answer first
19foundation · easy
What is the first step in the security policy development process?
Select an answer first
20foundation · easy
Which document type is best described as 'recommended' rather than mandatory, providing best practices or optional approaches?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.

Policy Development GSTRT Practice Questions (Page 4)

Questions 16–20

Which event should trigger a review of a security policy?

A government agency is developing a policy for handling classified information. The policy must ensure that data is not altered during transmission and that only authorized personnel can access it. Which combination of security principles should the policy emphasize?

In a typical security documentation hierarchy, which document provides the specific step-by-step actions required to complete a task?

What is the first step in the security policy development process?

Which document type is best described as 'recommended' rather than mandatory, providing best practices or optional approaches?

Keep studying — Policy and Program Management