When analyzing stakeholders for a new data protection policy, which characteristic is most important to determine?

Their favorite communication channel

Their level of interest and influence on the policy

A logistics company's mission is to provide the fastest delivery in its region. The operations team proposes a new routing algorithm, but the finance team is concerned about the cost of real-time data feeds. Which business analysis technique would best evaluate whether the algorithm supports the mission?

A stakeholder survey asking customers if they want faster delivery.

A SWOT analysis of the company's overall strategy.

A cost-benefit analysis comparing the speed improvement against the data feed costs.

A requirements document listing all features of the new algorithm.

A nonprofit organization's mission is to provide free legal aid to underserved communities. The executive director proposes expanding services to a new region, but the board is concerned about funding. Which approach best aligns the expansion with the mission while addressing board concerns?

Develop a vision statement for the expansion that describes the desired future impact, then identify stakeholders and funding sources to support it.

Abandon the expansion because the mission does not mention geographic scope.

Rewrite the mission statement to include the new region before any planning.

Immediately launch the expansion using existing reserves without consulting stakeholders.

A government agency's mission is 'to protect public health through effective regulation.' The agency is considering a new digital inspection system. Inspectors want mobile access, the legal department wants a complete audit trail, and the budget office wants to minimize costs. The agency's vision is 'to be a model of transparent, data-driven regulation.' Which approach best aligns with the mission and vision?

Implement a system with no public dashboards to protect privacy

Implement a mobile-first system with automatic audit logging and public dashboards of aggregate inspection data

Implement a desktop-only system with manual logging to reduce costs

Outsource the system to a vendor with no audit trail requirements

GIAC Strategic Planning, Policy, and Leadership

Domain 3Objective 1

Understanding the Business GSTRT Practice Questions (Page 7)

Part of the Business and Threat Context domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 9–16 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

3concepts

Questions 31–35

31application · medium
A bank is developing a new mobile banking app. The security team requires multi-factor authentication, the marketing team wants a one-click login, and the customer service team wants a chat feature. Which requirement should be considered a 'must-have' in a MoSCoW analysis?
Select an answer first
32foundation · easy
When analyzing stakeholders for a new data protection policy, which characteristic is most important to determine?
Select an answer first
33application · medium
A logistics company's mission is to provide the fastest delivery in its region. The operations team proposes a new routing algorithm, but the finance team is concerned about the cost of real-time data feeds. Which business analysis technique would best evaluate whether the algorithm supports the mission?
Select an answer first
34application · medium
A nonprofit organization's mission is to provide free legal aid to underserved communities. The executive director proposes expanding services to a new region, but the board is concerned about funding. Which approach best aligns the expansion with the mission while addressing board concerns?
Select an answer first
35expert · hard
A government agency's mission is 'to protect public health through effective regulation.' The agency is considering a new digital inspection system. Inspectors want mobile access, the legal department wants a complete audit trail, and the budget office wants to minimize costs. The agency's vision is 'to be a model of transparent, data-driven regulation.' Which approach best aligns with the mission and vision?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSTRT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSTRT” is a trademark of its owner, used for identification only.

Understanding the Business GSTRT Practice Questions (Page 7)

Questions 31–35

A bank is developing a new mobile banking app. The security team requires multi-factor authentication, the marketing team wants a one-click login, and the customer service team wants a chat feature. Which requirement should be considered a 'must-have' in a MoSCoW analysis?

When analyzing stakeholders for a new data protection policy, which characteristic is most important to determine?

A nonprofit organization's mission is to provide free legal aid to underserved communities. The executive director proposes expanding services to a new region, but the board is concerned about funding. Which approach best aligns the expansion with the mission while addressing board concerns?

Keep studying — Business and Threat Context