When developing a security policy, why is it important to consider contractual obligations with third parties?

To ensure the policy aligns with agreed security requirements

Why is it important to regularly review and update security policies?

To keep policies aligned with evolving threats and business changes

To eliminate the need for enforcement

To reduce the need for employee training

A company is writing a new policy for the use of personal mobile devices for work (BYOD). The policy team is defining the 'roles and responsibilities' section. Which of the following statements is most appropriate for this section?

The company is responsible for ensuring that all personal devices are free from malware.

The HR department is responsible for monitoring employee compliance with this policy.

Employees are responsible for maintaining the confidentiality of company data on their personal devices.

The IT department is responsible for providing support for all devices used for work purposes.

What is a key benefit of obtaining employee acknowledgment of a security policy?

It replaces the policy review process

It provides evidence of awareness

It eliminates the need for enforcement

GIAC Strategic Planning, Policy, and Leadership

Domain 2Objective 1

Policy Development GSTRT Practice Questions (Page 7)

Part of the Policy and Program Management domain, which makes up ~45% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~32–54 in this domain), expect 8–14 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

Questions 31–35

31foundation · easy
When developing a security policy, why is it important to consider contractual obligations with third parties?
Select an answer first
32foundation · easy
Why is it important to regularly review and update security policies?
Select an answer first
33application · medium
A company is writing a new policy for the use of personal mobile devices for work (BYOD). The policy team is defining the 'roles and responsibilities' section. Which of the following statements is most appropriate for this section?
Select an answer first
34foundation · easy
After a security policy has been drafted, what is the next step in the development process?
Select an answer first
35foundation · easy
What is a key benefit of obtaining employee acknowledgment of a security policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.