Online Access Free GSTRT Exam Questions

What is the primary purpose of a cybersecurity policy review process?
Response:

• A.To remove outdated sections without consulting stakeholders
• B.To ensure the policy remains relevant to new threats and regulatory changes
• C.To reduce the complexity of the policy
• D.To simplify the policy so that it covers only basic security measures

Which communication technique is most effective when resolving a conflict between team members?
Response:

• A.Allowing each member to email their perspective
• B.Assigning a third-party mediator to handle the conflict privately
• C.Using active listening and focusing on finding a mutually beneficial solution
• D.Holding a group vote to determine the winner

Your organization recently updated its data protection policy to comply with new regulations. However, a recent internal audit revealed that several departments are not fully adhering to the policy. How would you address this issue to ensure consistent compliance across the organization?
Response:

• A.Penalize departments that failed the audit
• B.Disregard the audit results and assume that future compliance will improve on its own
• C.Conduct targeted training sessions for the non-compliant departments and assign team leads to oversee adherence
• D.Enforce immediate penalties on all employees for non-compliance

What is the primary purpose of including a policy exception process in a cybersecurity policy?
Response:

• A.To avoid having to enforce the policy
• B.To provide a structured process for requesting deviations from the policy under specific circumstances
• C.To allow employees to bypass the policy
• D.To minimize policy updates

When assessing the performance of a security program, why is it important to involve cross-functional teams?
Response:

• A.To limit input from non-technical departments
• B.To shift responsibility away from the security team
• C.To delay the assessment process
• D.To gather diverse perspectives and ensure the program addresses the needs of different departments