7.15 - Address Personnel Safety and Security Concerns CISSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   During an emergency in a high-risk travel location, what is the FIRST action a traveling employee should take according to standard travel security protocols?

   • APost a status update on social media to inform family
   • BReturn immediately to the hotel to pack belongings
   • CContact the local embassy or consulate
   • DFollow the emergency procedures outlined in the pre-travel briefing
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   A company's headquarters is in a region prone to earthquakes. The security team is updating the emergency management plan. During a recent drill, employees evacuated the building but many did not know the designated assembly point, and some attempted to retrieve personal belongings. Which phase of emergency management does this issue primarily relate to, and what is the most effective improvement?

   • AResponse phase; implement a headcount system at the assembly point.
   • BPrevention phase; install earthquake-resistant building reinforcements.
   • CRecovery phase; provide counseling to employees who were stressed during the drill.
   • DPreparedness phase; conduct regular evacuation drills and clearly communicate assembly point locations and the importance of leaving belongings behind.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A company has implemented 2FA using push notifications. Users are complaining about the number of prompts they receive, and some have started using a browser extension that automatically approves all 2FA requests. The security team needs to reduce fatigue while maintaining security. Which combination of measures would be most effective?

   • ASwitch to SMS-based 2FA and require users to enter a code each time.
   • BIncrease the timeout for 2FA prompts and provide users with a guide on how to manage notifications.
   • CImplement number matching and reduce the frequency of 2FA prompts by using device trust for known devices.
   • DDisable 2FA for users who have been with the company for more than five years.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Before an employee travels to a high-risk region, which of the following is the MOST important security measure to implement?

   • ARequire the employee to sign a non-disclosure agreement before departure
   • BProvide a pre-travel security briefing covering local threats, communication methods, and emergency contacts
   • CArrange for a local driver who speaks the language
   • DIssue a company laptop with full-disk encryption and a VPN client
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A financial services firm discovers that an employee has been posting negative comments about the company on a public forum, including details about upcoming mergers. The employee's posts have attracted media attention. What is the most appropriate immediate action?

   • AContact the forum administrators to have the posts removed and issue a cease-and-desist letter to the employee.
   • BIssue a company-wide memo reminding employees not to discuss confidential information on social media.
   • CTerminate the employee immediately for violating the social media policy.
   • DInitiate an insider threat investigation and involve legal counsel to assess the impact of the information disclosure.
   Reveal Solution Discussion Select an answer first