7.15 - Address Personnel Safety and Security Concerns CISSP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's security awareness training includes a module on social media risks. The training teaches employees to avoid posting about their work projects. Which additional topic would most directly reinforce this lesson?

   • AHow to configure privacy settings on social media platforms.
   • BHow to report social media posts that violate company policy.
   • CThe legal consequences of posting confidential information.
   • DExamples of how seemingly innocuous posts can be pieced together by adversaries to reveal sensitive information.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a common behavioral indicator of a potential insider threat?

   • AAn employee who requests access to systems only as needed for their job
   • BAn employee who takes regular vacations and uses their allotted leave
   • CAn employee who frequently works late and accesses data outside of normal working hours
   • DAn employee who attends all mandatory security training sessions
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A system administrator has been acting unusually: working odd hours, expressing financial stress, and recently failing a random drug test. The administrator has access to the company's encryption keys. The security team suspects insider threat but lacks concrete evidence of malicious activity. What is the most appropriate immediate action?

   • AImmediately revoke the administrator's access to all systems and place them on administrative leave.
   • BIncrease monitoring of the administrator's activities and flag any anomalies for further investigation.
   • CReport the administrator to law enforcement for potential insider threat activity.
   • DConfront the administrator with the observed indicators and ask for an explanation.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the purpose of a duress alarm or duress code word?

   • ATo notify all employees to evacuate the building immediately
   • BTo discreetly alert security personnel that the employee is under duress without the perpetrator knowing
   • CTo automatically lock down the entire facility during any emergency
   • DTo record the employee's conversation for later evidence
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A retail store has a duress alarm system at the cash registers. During a robbery, the cashier activates the alarm, but the store manager, unaware, approaches the robber to negotiate. The police arrive and the robber is arrested. In a post-incident review, which improvement would best enhance future duress response?

   • AIncrease the number of security guards on duty during peak hours.
   • BTrain all employees, including managers, on duress alarm activation and the importance of not intervening during a robbery.
   • CReplace the duress alarm system with a silent panic button that only alerts law enforcement.
   • DInstall additional duress alarms in the manager's office and other back-of-house areas.
   Reveal Solution Discussion Select an answer first