1.8 - Contribute to and Enforce Personnel Security Policies and Procedures CISSP Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An employee is leaving the company to work for a direct competitor. The employee signed an NDA and a non-compete agreement at hiring. During the exit interview, the employee says they plan to use their knowledge of the company's pricing strategy in their new role. What should the company do?

   • ARemind the employee of their ongoing obligations under the NDA and non-compete agreement.
   • BTake no action because the employee's knowledge is now in their head and cannot be controlled.
   • CImmediately revoke the employee's access and confiscate all company devices.
   • DOffer the employee a severance package in exchange for signing a new, broader NDA.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm is hiring a contractor for a six-month project that will involve access to customer PII. The hiring manager wants to bring the contractor on board quickly to meet a project deadline. The security team insists on completing the standard pre-employment screening before granting any system access. Which action best balances the deadline with security requirements?

   • AExpedite the background check by using a less thorough screening package that returns results in 24 hours.
   • BDelay the contractor's start date until the background check and reference verification are completed and approved.
   • CHave the hiring manager vouch for the contractor's trustworthiness so the background check can be waived for this engagement.
   • DAllow the contractor to start with a temporary account that has read-only access to non-sensitive data while the background check is pending.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which contractual clause is essential to ensure that a contractor does not disclose the organization's proprietary information during or after the engagement?

   • AService level agreement (SLA) clause
   • BNon-disclosure agreement (NDA) clause
   • CIndemnification clause
   • DTermination clause
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of including a background check requirement in a contract with a vendor or contractor?

   • ATo verify that the vendor has the technical capability to perform the contracted work
   • BTo ensure the vendor's employees are legally allowed to work in the country
   • CTo determine the vendor's financial stability
   • DTo ensure that the vendor's personnel who will access the organization's systems or data meet a minimum level of trustworthiness
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is engaging a consultant to perform a security assessment. The consultant will need access to the company's network and systems. The company's policy requires that all third parties sign an NDA. The consultant's firm refuses to sign the company's NDA, offering instead their own NDA that is less restrictive. What should the company do?

   • AProceed without any NDA because the consultant is bound by professional ethics.
   • BHave the consultant sign a modified NDA that only covers the specific data they will access.
   • CAccept the consultant's NDA because it still provides some confidentiality protection.
   • DRefuse to engage the consultant unless they sign the company's NDA.
   Reveal Solution Discussion Select an answer first