1.8 - Contribute to and Enforce Personnel Security Policies and Procedures CISSP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a typical step in the candidate screening process that helps verify the candidate's past job performance and behavior?

   • ASocial media review
   • BPersonality assessment
   • CReference verification
   • DDrug testing
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has a contract with a cleaning service that has access to the building after hours. The contract is ending, and the cleaning service will be replaced by a new vendor. What should the company do to ensure the old vendor no longer has access?

   • ANotify the old vendor that their contract is ending and ask them to return the badges.
   • BChange the locks on all exterior doors.
   • CConduct a performance review of the old vendor to decide if they should be rehired.
   • DRevoke the old vendor's access badges and update the access control list.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An employee is retiring after 20 years. The employee has access to the company's financial systems and has been a system administrator for the accounting software. What is the most important security action during the retirement offboarding?

   • ADeactivate the employee's account but leave shared account passwords unchanged.
   • BRevoke all access and change all passwords that the employee knew, especially for shared accounts.
   • CAllow the employee to keep their laptop as a retirement gift.
   • DConduct a performance review to document the employee's contributions.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why is an exit interview considered a security-related step in the termination process?

   • AIt is the only way to collect company assets
   • BIt provides an opportunity to remind the employee of their ongoing confidentiality obligations and to collect feedback on security issues
   • CIt is required by law for all terminations
   • DIt allows the employee to negotiate their severance package
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary security purpose of a non-disclosure agreement (NDA) in an employment agreement?

   • ATo legally bind the employee to keep confidential information secret both during and after employment
   • BTo specify the employee's job responsibilities and reporting structure
   • CTo prevent the employee from working for a competitor after leaving the organization
   • DTo require the employee to return all company assets upon termination
   Reveal Solution Discussion Select an answer first