Security Program Development GSTRT Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company is developing a security roadmap. The company has a mature security program but wants to improve its incident response capabilities. The CISO has identified two projects: implementing a SOAR platform and conducting regular tabletop exercises. The budget allows for only one project this year. Which project should the CISO choose?

   • AImplement the SOAR platform because it automates incident response and reduces manual effort.
   • BImplement the SOAR platform and conduct tabletop exercises in parallel, even if it exceeds the budget.
   • CConduct tabletop exercises because they improve team coordination and identify gaps in the incident response plan.
   • DDefer both projects and focus on hiring more security staff.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security team is implementing a new metrics program. The CISO wants to report to the board on the program's effectiveness. The team has proposed several metrics. Which metric is most likely to be meaningful to the board?

   • ANumber of security tools deployed
   • BPercentage of critical vulnerabilities remediated within the SLA
   • CNumber of security incidents detected per month
   • DTotal hours spent on security training
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A global bank is developing a security roadmap. The bank's strategic priorities include expanding into emerging markets and complying with new data protection regulations. The security team has a limited budget and must choose between investing in advanced threat detection or in compliance automation. Which approach best balances the competing priorities?

   • AInvest entirely in compliance automation because regulatory compliance is non-negotiable.
   • BSplit the budget equally between the two initiatives without further analysis.
   • CPrioritize compliance automation first, then use the remaining budget for threat detection, with a phased roadmap that revisits priorities annually.
   • DInvest entirely in advanced threat detection because it addresses a broader range of risks.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A non-profit organization is developing a security roadmap. The organization has a very limited budget and relies heavily on volunteers. The board wants to see a plan that is realistic and achievable. Which approach should the security team take?

   • ADelay creating a roadmap until the organization can afford a full-time security team.
   • BFocus the roadmap on free or low-cost security tools only.
   • CDevelop a comprehensive roadmap covering all possible security improvements, even if most cannot be funded.
   • DPrioritize a few high-impact controls that address the most significant risks, and phase them over time.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A multinational corporation is rolling out a new security program that includes data loss prevention (DLP) and stricter remote access controls. The European works council is concerned about employee privacy. The CISO must socialize the program to gain acceptance. Which approach is most effective?

   • AExplain the program's benefits and how it protects both the company and employees, and address privacy concerns through transparent communication.
   • BLimit the program to non-European regions to avoid privacy issues.
   • CImplement the program without discussing it with the works council to avoid delays.
   • DProvide only the minimum information required by law to the works council.
   Reveal Solution Discussion Select an answer first