GIAC GSTRT Certification Sample Questions
The purpose of this Sample Question Set is to provide you with information about the GIAC Strategic Planning, Policy, and Leadership (GSTRT) exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the GSTRT certification test. To get familiar with real exam environment, we suggest you try our Sample GIAC GSTRT Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual GIAC Strategic Planning, Policy, and Leadership (GSTRT) certification exam.
These sample questions are simple and basic questions that represent likeness to the real GIAC Strategic Planning, Policy, and Leadership exam questions. To assess your readiness and performance with real-time scenario based questions, we suggest you prepare with our Premium GIAC GSTRT Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.
GIAC GSTRT Sample Questions:
01. Two years ago the company bought a security orchestration and automation platform. It is still barely used: the SOC has no documented triage or escalation procedures, and analysts handle each alert their own way. The CISO is now asked whether next year's budget should fund an additional detection tool.
What should the security program do next?
a) Hire a dedicated platform engineer to build automated playbooks from each analyst's current individual practice
b) Define triage and escalation procedures and roles, then configure the platform to support them
c) Fund the additional detection tool so the SOC gains coverage while the existing platform is adopted gradually
d) Replace the orchestration platform with one the vendor says is easier to configure, and retrain analysts on it
02. A regulator requires a company to encrypt stored customer records by a fixed date six months away. The security engineering team normally makes decisions by consensus, and several engineers argue that the requirement is unnecessary for their systems.
How should the team's leader approach the work?
a) State clearly that the encryption requirement and deadline are fixed, and involve the team in deciding how to implement it
b) Ask the compliance team to explain the regulation, answer the engineers' objections, and report back before work starts
c) Hold team discussions until the engineers agree that the encryption requirement is worth meeting
d) Assign each engineer a detailed encryption task plan and deadline without further discussion
03. One engineer is the only person who understands the organization's custom-built OT network monitoring platform. When she was on leave last year, two outages went unresolved for days. There is no budget for another hire.
How should the security manager reduce this key-person risk?
a) Offer her a retention bonus to reduce the risk that she leaves the organization
b) Cross-train two colleagues on the monitoring platform and document a succession plan for her role
c) Restrict changes to the monitoring platform to periods when she is available to approve and support them
d) Document her procedures in a runbook for others to follow when she is away
04. Each quarter the security team presents the board with its own self-assessment scores for the program's key controls. The board says it wants assurance that the controls work as described, from a source that does not depend on the program grading itself.
How should the CISO respond?
a) Commission an independent assessment by internal audit or a qualified third party
b) Report key risk indicator trends alongside the scores
c) Score the self-assessment against an independently published maturity model
d) Attach evidence such as screenshots and owner sign-offs to the team's quarterly self-assessment
05. In an information security policy framework, what does a baseline define?
a) The recommended practices staff may adapt to their situation
b) Management's high-level security intent
c) The step-by-step instructions administrators follow to harden a system
d) The minimum security configuration systems must meet
06. The COO wants the security team's limited engineering capacity next quarter spent on hardening plant control systems. The CMO wants it spent on securing a new customer loyalty app before launch. Risk assessments rate the two exposures as comparable, the team cannot do both, and each executive has asked the CISO to commit. The organization has documented strategic objectives and an executive steering committee that sponsors the security program.
How should the CISO resolve the conflict?
a) Choose the loyalty app, since its launch date is fixed and the plant hardening could move to a later quarter
b) Split the engineering capacity evenly between the two requests so that neither executive's priority is dropped
c) Have the steering committee decide by weighing both options against the strategic objectives
d) Ask the two executives to meet and agree on a priority themselves
07. During a ransomware incident, the incident lead opened a firewall rule giving a recovery vendor direct remote access to production servers, which the network security standard prohibits. The incident is now contained, but the rule is still in place because the vendor's restoration work will take two more weeks.
How should this deviation be handled now?
a) Amend the network security standard to permit vendor access during incident recovery
b) Record it retroactively through the exception process, time-bound to the restoration work and signed off by its risk owner
c) Leave the rule in place and review it in the post-incident lessons-learned session once restoration is finished, so all deviations are handled together
d) Ask the vendor to sign a confidentiality agreement covering the production data
08. An analyst asks her manager for help with a business stakeholder who keeps ignoring her audit findings. The manager wants to use a coaching approach in the conversation.
What should the manager do?
a) Take over the stakeholder relationship until the audit findings are resolved, then hand it back to the analyst
b) Offer career advice on building influence as the analyst moves toward more senior roles
c) Explain how the manager handled similar stakeholders in the past and recommend the analyst take the same steps
d) Ask open questions that help the analyst work out her own approach
09. Your company has signed a letter of intent to acquire a smaller online payments firm, and the deal is scheduled to close in ten weeks. The deal team plans to involve security only once integration begins after close.
What should you recommend to the deal team?
a) Plan how to integrate the firm's networks and identities now, so that access and monitoring controls are live on day one after close
b) Perform security due diligence before close, so that inherited risks such as past breaches or weak controls can shape the deal's price and terms
c) Schedule a full penetration test and control review of the firm's environment for the first month after close
d) Require the firm to complete the company's standard vendor security questionnaire
10. The vulnerability management manager needs a measure showing how well the patching process performs against the remediation window agreed with system owners.
Which measure is a key performance indicator (KPI) for that purpose?
a) Percentage of critical patches applied within the agreed remediation window
b) Number of vulnerability scans completed each month
c) Risk rating shown for vulnerability management in the enterprise register
d) Weekly count of internet-facing systems with unpatched critical vulnerabilities, shown as a trend
Answers:
|
Question: 01 Answer: b |
Question: 02 Answer: a |
Question: 03 Answer: b |
Question: 04 Answer: a |
Question: 05 Answer: d |
|
Question: 06 Answer: c |
Question: 07 Answer: b |
Question: 08 Answer: d |
Question: 09 Answer: b |
Question: 10 Answer: a |
Note: For any error in GIAC Strategic Planning, Policy, and Leadership (GSTRT) certification exam sample questions, please update us by writing an email on feedback@edusum.com.
