5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A small company wants to improve its security posture without a large budget. The most common security incidents are employees clicking on phishing links and leaving their desks without locking their screens. Which two measures would be most effective and cost-efficient?

   • AImplement a security awareness training program and enforce a screen-lock policy with automatic lockout.
   • BHire a security consultant to conduct a one-time audit and provide a report.
   • CDeploy a SIEM system and require two-factor authentication for all accounts.
   • DPurchase advanced endpoint protection software and install biometric door locks.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A global company must provide security training to employees in multiple countries with different languages and cultural contexts. The training must cover phishing and physical access control. What is the best approach to ensure effectiveness across the workforce?

   • ADevelop a single training module in English and require all employees to complete it.
   • BCreate localized training modules in multiple languages, with examples relevant to each region.
   • CProvide training only to employees in regions with high security incidents.
   • DUse only visual training materials with no text, so language is not a barrier.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is introducing a new policy that requires all employees to use a password manager. The IT department has noticed that many employees are resistant to the change. Which training approach would best help employees adopt the new policy?

   • AProvide hands-on training sessions where employees can practice using the password manager in a safe environment.
   • BThreaten disciplinary action for employees who do not use the password manager.
   • CMake the training optional and self-paced online.
   • DSend a detailed email explaining the benefits of the password manager.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has a policy that requires employees to report security incidents immediately. However, employees often delay reporting because they are afraid of being blamed. Which awareness program element would best address this issue?

   • AA poster that lists the steps to report an incident.
   • BA policy that requires employees to report incidents within one hour.
   • CA no-blame culture campaign that emphasizes the importance of reporting and assures employees they will not be punished for honest mistakes.
   • DA mandatory training session on how to use the incident reporting system.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of a user awareness program in an organization?

   • ATo teach employees advanced technical skills for configuring network devices
   • BTo inform employees about security policies and encourage behaviors that reduce risk
   • CTo provide a formal certification path for security professionals
   • DTo replace the need for technical security controls such as firewalls and antivirus
   Reveal Solution Discussion Select an answer first