A bank is implementing a new customer onboarding process. The compliance team requires extensive identity verification, while the sales team wants a quick, frictionless experience. Which approach best balances these competing interests?

Prioritize sales because customer experience drives revenue.

Prioritize compliance because regulations are mandatory.

Use a stakeholder matrix to classify compliance and sales by interest and influence, then design a process that meets regulatory requirements while minimizing customer friction.

Ask the compliance team to relax its requirements.

A logistics company wants to reduce fuel costs. The operations team suggests route optimization software, the finance team wants a fuel card program, and the sustainability team wants electric vehicles. The company's mission emphasizes 'efficient and sustainable delivery.' Which analysis would best evaluate these options?

A multi-criteria decision analysis that scores each option against cost, efficiency, and sustainability

A SWOT analysis of the company's current fuel usage

A stakeholder map showing who supports each option

A simple payback period calculation for each option

A multinational corporation is updating its code of conduct. The European employees' council wants stronger data privacy protections, the US sales team wants fewer restrictions on client entertainment, and the CEO wants to reinforce the company's mission of 'integrity in all we do.' Which approach best balances these stakeholder interests?

Adopt the US sales team's preferences to boost revenue

Adopt the European council's strictest privacy rules and ban all client entertainment

Adopt a global standard that meets the strictest privacy requirements and clearly defines acceptable entertainment limits

Adopt separate regional policies to satisfy each group

A family-owned business's mission is to preserve its heritage while modernizing operations. The owner wants to implement cloud-based systems, but the family board is hesitant. Which approach best addresses the board's concerns while honoring the mission?

Abandon modernization to preserve the heritage.

Develop a vision for modernization that shows how cloud systems will preserve the company's core values and legacy.

Implement cloud systems immediately to stay competitive.

Ask the board to approve a new mission statement that drops the heritage focus.

A manufacturing company is considering a new IoT-based predictive maintenance system. The plant manager wants real-time alerts, the finance director wants a clear ROI model, and the IT director is concerned about OT network security. Which business analysis technique would best capture and reconcile these diverse requirements?

A cost-benefit analysis of the proposed system

A SWOT analysis of the company's current maintenance process

A feasibility study focused on technical infrastructure

Stakeholder interviews followed by a requirements workshop

GIAC Strategic Planning, Policy, and Leadership

Domain 3Objective 1

Understanding the Business GSTRT Practice Questions (Page 6)

Part of the Business and Threat Context domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 9–16 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

3concepts

Questions 26–30

26application · medium
A bank is implementing a new customer onboarding process. The compliance team requires extensive identity verification, while the sales team wants a quick, frictionless experience. Which approach best balances these competing interests?
Select an answer first
27application · medium
A logistics company wants to reduce fuel costs. The operations team suggests route optimization software, the finance team wants a fuel card program, and the sustainability team wants electric vehicles. The company's mission emphasizes 'efficient and sustainable delivery.' Which analysis would best evaluate these options?
Select an answer first
28expert · hard
A multinational corporation is updating its code of conduct. The European employees' council wants stronger data privacy protections, the US sales team wants fewer restrictions on client entertainment, and the CEO wants to reinforce the company's mission of 'integrity in all we do.' Which approach best balances these stakeholder interests?
Select an answer first
29application · medium
A family-owned business's mission is to preserve its heritage while modernizing operations. The owner wants to implement cloud-based systems, but the family board is hesitant. Which approach best addresses the board's concerns while honoring the mission?
Select an answer first
30application · medium
A manufacturing company is considering a new IoT-based predictive maintenance system. The plant manager wants real-time alerts, the finance director wants a clear ROI model, and the IT director is concerned about OT network security. Which business analysis technique would best capture and reconcile these diverse requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.

Understanding the Business GSTRT Practice Questions (Page 6)

Questions 26–30

A bank is implementing a new customer onboarding process. The compliance team requires extensive identity verification, while the sales team wants a quick, frictionless experience. Which approach best balances these competing interests?

A family-owned business's mission is to preserve its heritage while modernizing operations. The owner wants to implement cloud-based systems, but the family board is hesitant. Which approach best addresses the board's concerns while honoring the mission?

Keep studying — Business and Threat Context