최신GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT무료샘플문제

A. Posting the policy updates on a bulletin board without explanation

B. Implementing mandatory training sessions and providing clear communication channels to explain the updates

C. Sending an email with the updated policy and assuming everyone reads it

D. Relying on managers to verbally inform their teams

A. Direct physical access to the victim's device

B. Social engineering attacks, such as phishing emails containing malicious links or attachments

C. Exploiting outdated firewall settings

D. Installing software updates

A. To prevent the use of administrative privileges by IT staff

B. To ensure that all users have the highest level of access

C. To allow all users to access sensitive data

D. To restrict users' access to only the resources they need to perform their job duties

A. Focus solely on encrypting customer data, leaving other security measures to be determined later

B. Develop a comprehensive policy that includes data encryption, access control, regular security audits, compliance with relevant regulations (e.g., GDPR, CCPA), and third-party vendor security standards

C. Assume that the cloud service provider will handle all security measures, requiring no input from your organization

D. Limit security controls to basic password requirements and focus on marketing the platform

A. Delay any updates to the program until a ransomware attack occurs

B. Ignore ransomware protection since it has not caused any recent incidents

C. Allocate the ransomware protection budget to other areas of security

D. Update the security program by implementing ransomware-specific defenses such as frequent data backups, network segmentation, and employee training on phishing attacks

A. Work closely with the business leaders to understand their innovation goals, propose security controls that protect critical assets without hindering innovation, and ensure security is built into the transformation process

B. Implement the strictest security controls possible to avoid any potential breaches

C. Ignore the business transformation and focus solely on traditional security measures

D. Eliminate all security controls to prioritize innovation

A. Defining the least critical business units

B. Identifying which business units should be excluded from security measures

C. Assessing the potential impact of security incidents on business operations and identifying critical processes that must be protected

D. Simplifying security processes across all business functions