Security Program Analysis GSTRT Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An educational institution values academic freedom and open access to information. It is planning to implement a new research collaboration platform that will allow external partners to access internal systems. The security team must forecast future security needs. What should be the primary consideration?

   • ARequiring all external partners to sign a security waiver
   • BLimiting the platform to internal users only
   • CImplementing strong access controls and monitoring for external collaborators
   • DBlocking all external access to preserve the institution's security
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A logistics company has a mature security program with strong endpoint protection and a well-staffed SOC, but its business is expanding into new international markets. The CISO is analyzing the program's alignment with business objectives. What is the most important factor to evaluate?

   • AWhether the company's logo is visible in the security awareness training
   • BWhether the current endpoint protection vendor has a good reputation
   • CWhether the SOC is using the latest version of its SIEM software
   • DWhether the security team has the capacity to support new regulatory and data-residency requirements
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A merger between two companies is underway. Company A has a security culture of 'security by default' with strict controls, while Company B has a culture of 'enablement first' with minimal controls. The security team must conduct a program assessment for the merged entity. The business objective is to integrate operations quickly while maintaining security. What is the most effective approach?

   • AKeep the security programs separate until the merger is fully completed.
   • BConduct a cultural assessment of both companies and develop a unified security framework that respects both cultures while meeting the business objective.
   • CAdopt Company B's permissive policies to avoid disrupting operations and then gradually introduce controls.
   • DAdopt Company A's strict security policies for the entire merged entity to ensure a strong security posture.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A hospital system is conducting a security program assessment. The organization's mission emphasizes 'compassionate care and community service.' The assessment reveals that the current security program is technically strong but has a weak incident response process that could delay patient care during a cyberattack. The board is considering whether to invest in a new security operations center (SOC) or improve the incident response plan. The hospital's culture is collaborative and patient-focused. Which recommendation best aligns with the organization's mission and addresses the assessment finding?

   • AInvest in both the SOC and the incident response plan equally, as both are important.
   • BImprove the incident response plan with clear roles, communication protocols, and patient-safety checkpoints.
   • CInvest in the SOC because it provides 24/7 monitoring and faster detection of threats.
   • DDefer the decision until after a tabletop exercise to test the current incident response plan.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   A security analyst notices that employees frequently bypass security procedures because they value speed and convenience over formal processes. When analyzing the security program, which factor is most important to consider?

   • ACompliance checklists
   • BNetwork architecture
   • COrganizational culture
   • DVendor contracts
   Reveal Solution Discussion Select an answer first