GIAC Strategic Planning, Policy, and Leadership (GSTRT) - GSTRT Exam Practice Test

A. A waiver for third-party vendors exempting them from security compliance

B. Detailed instructions on how the third-party should operate internally

C. A requirement for third-party vendors to provide their own policies without oversight

D. A section outlining the security standards and requirements that third-party vendors must adhere to

A. To minimize policy updates

B. To avoid having to enforce the policy

C. To allow employees to bypass the policy

D. To provide a structured process for requesting deviations from the policy under specific circumstances

A. Non-technical controls are less important than technical measures

B. Only technical controls prevent security breaches

C. Non-technical controls, such as policies and training, are critical to creating a culture of security and ensuring that technical measures are followed correctly

D. Non-technical controls have no impact on security

A. They often target critical infrastructure, government entities, and high-value intellectual property

B. They lack significant resources and technical expertise

C. They primarily engage in website defacements

D. They are primarily motivated by financial gain

A. Wait for an attack to occur before taking any action

B. Ignore the reports since your organization hasn't been targeted yet

C. Shut down all network connections to prevent an attack

D. Strengthen your incident response plan, implement regular backups of critical data, perform network segmentation, and provide employee training on phishing prevention

A. Flexibility

B. Fearlessness

C. Indifference

D. Micromanagement