Online Access Free GSTRT Practice Test

Which of the following tools can help automate the enforcement of cybersecurity policies within an organization?
Response:

• A.Physical security audits
• B.Employee meetings
• C.Printed policy handbooks
• D.Policy management software

What role do security awareness and training programs play in the development of a comprehensive cybersecurity program?
Response:

• A.They are optional and not necessary for most organizations
• B.They are only required for IT staff
• C.They are only effective after a breach has occurred
• D.They help employees understand and comply with security policies, reducing the risk of human error

What is the benefit of aligning cybersecurity policies with international standards such as ISO 27001?
Response:

• A.It reduces the need for internal audits
• B.It limits the organization's flexibility to adopt emerging technologies
• C.It ensures the policy meets global best practices and enhances the organization's credibility
• D.It increases the complexity of the policy

What is the role of key performance indicators (KPIs) in the analysis of a security program?
Response:

• A.To assess the performance of individual employees
• B.To limit security spending
• C.To measure the effectiveness and efficiency of security processes and controls
• D.To reduce the complexity of the security program

Your organization has been monitoring an increasing number of phishing attacks targeting senior leadership. You've identified several incidents where executives nearly fell victim to these scams. What steps should you take to mitigate this specific threat?
Response:

• A.Assume that executives will eventually fall victim and focus on remediation
• B.Ignore the threat since no successful attacks have occurred yet
• C.Disable all email accounts to prevent phishing attacks
• D.Implement targeted phishing awareness training for executives, deploy email filtering and anti-phishing technologies, and establish multi-factor authentication for sensitive accounts