SANS MGT514 EXAM PREP QUESTIONS WITH
FULL SOLUTION 2026
◉ PEST - E - Economic (1:65,74) Answer: The overall health of the
economy and how these factors influence companies, organizations,
and their decisions.
◉ PEST - S - Social (1:65,78) Answer: Looks at cultural aspects of the
market and how they affect the demand for a company's products
and/or services; customer needs and determine what incents them
to make purchases
◉ PEST - T - Technological (1:65,81) Answer: How technology can
either positively or negatively impact a business and the products
and/or services they provide. i.e. technology advancements, life
cycle of technologies, technology innovation
◉ SMS - stakeholder management strategy(1:91) Answer:
Technology deployment could impact not only security, but also the
enterprise. All stakeholders and impact need to be identified and
managed
◉ SMS - Stakeholder(1:95) Answer: People or groups with a vested
interest in the success of your strategy and who will affect of be
affected by your team's work.
,◉ SMS - Phase 1(1:98,99) Answer: Identifying stakeholders - hold a
meeting with your team of managers and staff to brainstorm who
key stakeholders might be
◉ SIPOC - Stakeholder ID Tool Answer: SIPOC (Suppliers, Inputs,
Processes, Outputs, & Customers)
◉ SIPOC - Suppliers (1:102,112) Answer: Those people/groups who
provide inputs
◉ SIPOC - Inputs (1:102,111) Answer: key requirements needed for
the process to work. Should represent information/materials the
suppliers provide to you.
◉ SIPOC - Processes (1:102,106) Answer: defined series of
activities;
◉ SIPOC - Outputs (1:102,108) Answer: tangible results of the
process steps.
◉ SIPOC - Customers (1:102,110) Answer: recipients/users of the
outputs produced at every step in the process.
,◉ SMS - Phase 2 (1:114) Answer: Understanding Stakeholder
motivation
◉ SMS - Phase 2 - Step 1 (1:114) Answer: Understand stakeholders -
meeting with them will help you better understand what motivates
them, what they want/need from you, what interests they have in
your work.
◉ SMS - Phase 2 - Step 2 (1:114) Answer: Mapping Power and
Interest - three levels of power veto, vote, voice; Three levels of
interest - High, medium, low
◉ SMS - Phase 2 - Step 3 (1:114) Answer: Prioritize Stakeholders -
High power/interested people, high power/less interested people,
Low power/interested people, Low power/less interested people
◉ SMS - Phase 3 (1:120) Answer: Manage relationships is critical to
the success of every project in every organization, so developing a
relationship plan can help you manage your relationships
◉ How to develop an understanding of threats (1:129) Answer:
Understand threat actors - think like your adversaries and
understand their motivations, business assets - identify critical
business assets, Analyzing threats - Understanding adversary TTP's
will help build defense
, ◉ VERIS (1:132) Answer: Vocabulary for Event Recording and
Incident Sharing - defines a schema and set of metrics to describe
security incidents in a structured and repeatable manner.
◉ VERIS Community Database(1:132) Answer: Free repository of
publicly reported security incidents
◉ Verizon DBIR (1:132) Answer: Verizon Data Breach Investigations
Report - standard way to analyze incidents; mapped and recoded
incidents from other frameworks
◉ VERIS Threat Actors (1:133) Answer: External - threats from
sources outside the organization; Internal - threats from within
organization; Partner - third party business relationships
◉ NotPetya (1:156) Answer: Variant of Petya ransomware;
encrypted Master Boot Record (MBR); not intended to collect
ransom; most expensive cyber attack in history causing $10 billion
in damages
◉ NotPetya - Attack Tools (1:161) Answer: EternalBlue - takes
advantage of unpatched windows Server Message Block (SMB) that
allows remote code execution; MimiKatz - automates collection of
FULL SOLUTION 2026
◉ PEST - E - Economic (1:65,74) Answer: The overall health of the
economy and how these factors influence companies, organizations,
and their decisions.
◉ PEST - S - Social (1:65,78) Answer: Looks at cultural aspects of the
market and how they affect the demand for a company's products
and/or services; customer needs and determine what incents them
to make purchases
◉ PEST - T - Technological (1:65,81) Answer: How technology can
either positively or negatively impact a business and the products
and/or services they provide. i.e. technology advancements, life
cycle of technologies, technology innovation
◉ SMS - stakeholder management strategy(1:91) Answer:
Technology deployment could impact not only security, but also the
enterprise. All stakeholders and impact need to be identified and
managed
◉ SMS - Stakeholder(1:95) Answer: People or groups with a vested
interest in the success of your strategy and who will affect of be
affected by your team's work.
,◉ SMS - Phase 1(1:98,99) Answer: Identifying stakeholders - hold a
meeting with your team of managers and staff to brainstorm who
key stakeholders might be
◉ SIPOC - Stakeholder ID Tool Answer: SIPOC (Suppliers, Inputs,
Processes, Outputs, & Customers)
◉ SIPOC - Suppliers (1:102,112) Answer: Those people/groups who
provide inputs
◉ SIPOC - Inputs (1:102,111) Answer: key requirements needed for
the process to work. Should represent information/materials the
suppliers provide to you.
◉ SIPOC - Processes (1:102,106) Answer: defined series of
activities;
◉ SIPOC - Outputs (1:102,108) Answer: tangible results of the
process steps.
◉ SIPOC - Customers (1:102,110) Answer: recipients/users of the
outputs produced at every step in the process.
,◉ SMS - Phase 2 (1:114) Answer: Understanding Stakeholder
motivation
◉ SMS - Phase 2 - Step 1 (1:114) Answer: Understand stakeholders -
meeting with them will help you better understand what motivates
them, what they want/need from you, what interests they have in
your work.
◉ SMS - Phase 2 - Step 2 (1:114) Answer: Mapping Power and
Interest - three levels of power veto, vote, voice; Three levels of
interest - High, medium, low
◉ SMS - Phase 2 - Step 3 (1:114) Answer: Prioritize Stakeholders -
High power/interested people, high power/less interested people,
Low power/interested people, Low power/less interested people
◉ SMS - Phase 3 (1:120) Answer: Manage relationships is critical to
the success of every project in every organization, so developing a
relationship plan can help you manage your relationships
◉ How to develop an understanding of threats (1:129) Answer:
Understand threat actors - think like your adversaries and
understand their motivations, business assets - identify critical
business assets, Analyzing threats - Understanding adversary TTP's
will help build defense
, ◉ VERIS (1:132) Answer: Vocabulary for Event Recording and
Incident Sharing - defines a schema and set of metrics to describe
security incidents in a structured and repeatable manner.
◉ VERIS Community Database(1:132) Answer: Free repository of
publicly reported security incidents
◉ Verizon DBIR (1:132) Answer: Verizon Data Breach Investigations
Report - standard way to analyze incidents; mapped and recoded
incidents from other frameworks
◉ VERIS Threat Actors (1:133) Answer: External - threats from
sources outside the organization; Internal - threats from within
organization; Partner - third party business relationships
◉ NotPetya (1:156) Answer: Variant of Petya ransomware;
encrypted Master Boot Record (MBR); not intended to collect
ransom; most expensive cyber attack in history causing $10 billion
in damages
◉ NotPetya - Attack Tools (1:161) Answer: EternalBlue - takes
advantage of unpatched windows Server Message Block (SMB) that
allows remote code execution; MimiKatz - automates collection of
