A government agency's mission is to ensure public safety. It is considering two projects: upgrading the emergency dispatch system and implementing a public-facing crime mapping tool. The budget is limited, and the agency must justify its choice to the legislature. Which approach best aligns with the mission and provides justification?

Fund both projects by cutting other programs.

Choose the crime mapping tool because it is more visible to the public.

Choose the dispatch system because it is more technologically advanced.

Use a cost-effectiveness analysis comparing the expected reduction in emergency response times against the cost of each project.

A financial services firm's mission is 'to empower clients to achieve financial security through trusted advice.' The firm is considering a new AI-driven investment advisory platform. The compliance department is concerned about regulatory risk, the sales team wants rapid deployment, and the CEO wants to reinforce the mission of trusted advice. Which approach best aligns with the mission while addressing stakeholder concerns?

Deploy the platform only to internal employees to avoid regulatory issues

Deploy the platform immediately with no human review to meet sales demand

Deploy the platform with a human-review layer for all AI-generated recommendations

Cancel the project because AI cannot provide trusted advice

A hospital is implementing a new electronic health record (EHR) system. Physicians want fast charting, nurses want intuitive medication administration, and the IT department wants minimal customizations. Which stakeholder should be involved in the requirements validation phase to ensure the system is usable?

Physicians and nurses, because they are the primary end users

External consultants, because they are objective

Hospital administrators, because they approve the budget

IT department only, because they understand the system's technical capabilities

A hospital's mission is to provide equitable care. The IT department must choose between two projects: a patient portal that improves access for English-speaking patients, and a telehealth service for rural communities. The budget allows only one project this year. Which decision-making approach best aligns with the mission?

Choose the telehealth service because it sounds more innovative.

Choose the patient portal because it is less expensive.

Delay the decision until both projects can be funded.

Use a weighted scoring model that rates each project against mission-aligned criteria such as reach to underserved populations and stakeholder input.

GIAC Strategic Planning, Policy, and Leadership

Domain 3Objective 1

Understanding the Business GSTRT Practice Questions (Page 3)

Part of the Business and Threat Context domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 9–16 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

3concepts

Questions 11–15

11expert · hard
A government agency's mission is to ensure public safety. It is considering two projects: upgrading the emergency dispatch system and implementing a public-facing crime mapping tool. The budget is limited, and the agency must justify its choice to the legislature. Which approach best aligns with the mission and provides justification?
Select an answer first
12expert · hard
A financial services firm's mission is 'to empower clients to achieve financial security through trusted advice.' The firm is considering a new AI-driven investment advisory platform. The compliance department is concerned about regulatory risk, the sales team wants rapid deployment, and the CEO wants to reinforce the mission of trusted advice. Which approach best aligns with the mission while addressing stakeholder concerns?
Select an answer first
13application · medium
A hospital is implementing a new electronic health record (EHR) system. Physicians want fast charting, nurses want intuitive medication administration, and the IT department wants minimal customizations. Which stakeholder should be involved in the requirements validation phase to ensure the system is usable?
Select an answer first
14foundation · easy
Which business analysis technique is used to identify the internal and external factors that may affect the success of a proposed security initiative?
Select an answer first
15expert · hard
A hospital's mission is to provide equitable care. The IT department must choose between two projects: a patient portal that improves access for English-speaking patients, and a telehealth service for rural communities. The budget allows only one project this year. Which decision-making approach best aligns with the mission?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.

Understanding the Business GSTRT Practice Questions (Page 3)

Questions 11–15

Which business analysis technique is used to identify the internal and external factors that may affect the success of a proposed security initiative?

Keep studying — Business and Threat Context