1.8 - Contribute to and Enforce Personnel Security Policies and Procedures CISSP Practice Questions (Page 6)

Questions 26–28

1. 26application · medium

   A consultant's contract is ending after a six-month project. The consultant has had access to the company's project management system and a shared drive. What is the most important action to take upon contract completion?

   • AConduct a performance review to decide whether to extend the contract.
   • BChange the passwords to the shared drive but leave the consultant's account active.
   • CRevoke the consultant's access to all systems and collect any company-issued equipment.
   • DSend a thank-you email and archive the consultant's files for future reference.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An employee in a defense contractor's engineering department is transferring to the human resources department. The employee currently has access to classified project files and the engineering build system. What is the most important security action during this transfer?

   • AOnly add HR system access, leaving engineering access unchanged to avoid disrupting the employee's work.
   • BRevoke all access to engineering systems and classified files, then provision HR-specific access based on the new role.
   • CConduct a new background check before granting any HR access.
   • DKeep the existing engineering access active in case the employee returns to that department.
   Reveal Solution Discussion Select an answer first
3. 28expert · hard

   An employee is being terminated for violating the company's data handling policy. The employee has access to a shared drive containing sensitive customer data and has been known to download files to a personal device. The termination is effective immediately. What is the most critical action to take first?

   • ACollect the employee's personal device to check for company data.
   • BSend a company-wide email announcing the termination.
   • CRevoke the employee's network access and all system credentials immediately.
   • DConduct an exit interview to discuss the termination reasons.
   Reveal Solution Discussion Select an answer first