5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key characteristic of role-based security training?

   • AIt focuses on the specific security responsibilities and risks relevant to an employee's job role
   • BIt is a one-time event conducted during employee onboarding
   • CIt provides the same training content to all employees regardless of their job function
   • DIt is only required for employees in the IT department
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which method is commonly used to provide ongoing security education to employees?

   • AExclusively through external certification exams
   • BAnnual refresher courses and periodic security bulletins
   • CA single onboarding session that is never repeated
   • DOnly on-the-job training without any formal curriculum
   Reveal Solution Discussion Select an answer first
4. 8expert · hard · select all that apply

   A company is designing a comprehensive security program. The following measures are being considered: (1) monthly security awareness newsletters, (2) annual role-based training for IT staff, (3) biometric access control for the data center, (4) a policy requiring employees to wear badges, and (5) a mantrap at the main entrance. Which of these measures are examples of user awareness or training? Select all that apply.

   • AAnnual role-based training for IT staff
   • BBiometric access control for the data center
   • CA mantrap at the main entrance
   • DA policy requiring employees to wear badges
   • EMonthly security awareness newsletters
   Check answers Discussion Select an answer first
5. 9application · medium

   A company wants to secure its server room. The room is accessed by a small team of administrators. The security policy requires that access be restricted to authorized personnel and that entry be logged. Which physical access control combination is most appropriate?

   • AA security camera that records the entrance but no access control.
   • BElectronic badge reader with PIN code and an audit log of entry events.
   • CA simple key lock with a sign-in sheet at the door.
   • DA biometric fingerprint scanner with no logging.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has experienced several phishing incidents where employees clicked malicious links in emails. The security team wants to reduce the likelihood of future incidents. Which approach best addresses this goal?

   • ARequire all employees to sign an acceptable use policy annually
   • BIncrease the frequency of password changes for all user accounts
   • CDeploy an email spam filter that quarantines all external email messages
   • DImplement a monthly simulated phishing campaign with immediate feedback and targeted training for repeat offenders
   Reveal Solution Discussion Select an answer first