CSC Communication & Conflict Resolution 2 — Questions and Answers
Question 1: A security consultant discovers that two department heads are providing contradictory security requirements. What is the BEST first step to resolve this conflict?
- Escalate immediately to the CEO
- Facilitate a joint meeting to identify common ground and reconcile differences (Correct answer)
- Choose the requirement that is easier to implement
- Document both requirements and implement them separately
Correct answer: Facilitate a joint meeting to identify common ground and reconcile differences
Facilitating a joint meeting allows both parties to communicate directly and find a mutually acceptable resolution based on actual security needs.
Question 2: When presenting a high-risk finding to a non-technical executive audience, which communication approach is MOST effective?
- Use detailed technical jargon to demonstrate expertise
- Focus on business impact, financial risk, and recommended mitigation steps (Correct answer)
- Provide raw vulnerability scan outputs for transparency
- Limit the presentation to technical staff only
Correct answer: Focus on business impact, financial risk, and recommended mitigation steps
Executives respond best to business-impact framing—financial exposure, regulatory risk, and actionable recommendations—rather than technical details.
Question 3: A client's IT staff resists implementing a security consultant's recommendations. What is the MOST productive approach?
- Bypass the IT staff and go directly to their manager
- Acknowledge their concerns, explain the rationale, and involve them in solution design (Correct answer)
- Threaten to note non-compliance in the final report
- Reduce the scope of recommendations to avoid resistance
Correct answer: Acknowledge their concerns, explain the rationale, and involve them in solution design
Involving resistant stakeholders in the solution design process builds buy-in and addresses legitimate operational concerns.
Question 4: Which active listening technique is MOST important when conducting a security interview with an employee who witnessed a breach?
- Interrupting to clarify facts as they arise
- Taking copious written notes while maintaining eye contact
- Paraphrasing and summarizing what the interviewee says to confirm understanding (Correct answer)
- Asking multiple questions simultaneously to save time
Correct answer: Paraphrasing and summarizing what the interviewee says to confirm understanding
Paraphrasing and summarizing confirm accurate understanding and encourage the interviewee to provide more complete information.
Question 5: A security consultant must communicate a significant budget overrun to the client. Which approach best maintains trust and professionalism?
- Delay disclosure until the project is complete
- Immediately notify the client with clear explanation, impact assessment, and corrective options (Correct answer)
- Minimize the disclosure to avoid negative reactions
- Shift blame to subcontractors in the communication
Correct answer: Immediately notify the client with clear explanation, impact assessment, and corrective options
Prompt, transparent communication with solutions preserves trust and allows the client to make informed decisions.
Question 6: In a multi-stakeholder security project, which conflict resolution style is MOST appropriate when both parties' needs are equally important and time allows?
- Avoiding — postpone the conflict indefinitely
- Competing — assert your position until the other party concedes
- Collaborating — work together to find a solution that satisfies both parties (Correct answer)
- Accommodating — yield to the other party's demands entirely
Correct answer: Collaborating — work together to find a solution that satisfies both parties
Collaboration (win-win) produces durable agreements when stakes are high for all parties and time permits thorough discussion.
Question 7: A security report contains sensitive vulnerability details. What is the MOST appropriate method for delivering this report to the client?
- Email the report as an unencrypted PDF attachment
- Post it to a public file-sharing site for easy access
- Deliver via encrypted channel or secure file transfer with access controls (Correct answer)
- Print and mail physical copies without tracking
Correct answer: Deliver via encrypted channel or secure file transfer with access controls
Sensitive security reports must be transmitted through encrypted, access-controlled channels to prevent unauthorized disclosure.
CSC Communication & Conflict Resolution 2
A security consultant discovers that two department heads are providing contradictory security requirements.
What is the BEST first step to resolve this conflict?