1.8 - Contribute to and Enforce Personnel Security Policies and Procedures CISSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What must be done with a contractor's access rights upon completion of their contract?

   • AAccess rights should be changed to read-only for a grace period
   • BAll access rights and credentials must be revoked promptly
   • CAccess rights should be maintained in case the contractor is needed again
   • DAccess rights should be transferred to the contractor's supervisor
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary purpose of conducting compliance audits on third-party vendors?

   • ATo evaluate the vendor's customer satisfaction ratings
   • BTo check if the vendor's employees are happy with their jobs
   • CTo determine if the vendor's pricing is competitive
   • DTo verify that the vendor is adhering to the security requirements and contractual obligations
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which clause in an employment agreement is designed to prevent an employee from leaving and immediately working for a direct competitor, thereby reducing the risk of intellectual property leakage?

   • ANon-disclosure agreement
   • BAcceptance of organizational policies
   • CEmployment eligibility verification
   • DNon-compete clause
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of conducting background checks as part of the candidate screening and hiring process?

   • ATo ensure the candidate is willing to accept the organization's salary offer
   • BTo determine the candidate's technical skills and proficiency for the role
   • CTo evaluate the candidate's cultural fit with the organization's values
   • DTo verify that the candidate's qualifications and employment history are accurate and to identify potential security risks
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is engaging a third-party vendor to provide IT support. The vendor's technicians will need remote access to the company's internal systems. Which contractual clause is most important to include in the vendor agreement?

   • AA clause specifying that the vendor must comply with the company's security policies and undergo background checks for its technicians.
   • BA clause requiring the vendor to maintain cyber liability insurance.
   • CA clause stating that the vendor is liable for any data breach, regardless of cause.
   • DA clause allowing the vendor to subcontract the work to other parties without prior approval.
   Reveal Solution Discussion Select an answer first