5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has a high rate of security incidents caused by employees leaving their desks without locking their computers. The security team wants to reduce this behavior. Which combination of awareness and training is most effective?

   • ARun a short awareness campaign with posters and a mandatory training module on workstation security
   • BSend a single email reminding employees to lock their computers
   • CImplement automatic screen lock via group policy
   • DAdd a clause to the employee handbook about locking computers
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A hospital has a high rate of unauthorized access to patient records, often because employees share their badges and leave workstations unlocked. The security team is considering a new awareness program. Which approach is most likely to reduce these incidents?

   • AA role-based training program for all staff that includes hands-on exercises on protecting patient privacy and securing workstations.
   • BA general security awareness video shown once a year to all employees.
   • CA policy that terminates employees who share badges, with no training.
   • DA poster campaign reminding employees to lock their screens and not share badges.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company has implemented a strong physical access control system with biometrics and mantraps. However, employees often hold the door open for others and share their badges with coworkers. Which additional security program element is most needed to address this gap?

   • AA policy that requires employees to wear badges visibly at all times.
   • BA user awareness program that reinforces the importance of not sharing badges and not allowing tailgating.
   • CA more advanced biometric system that scans multiple fingerprints.
   • DA security guard at every entrance to check badges manually.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company wants to secure its server room, but the room is also used as a pass-through to the break room. Employees frequently walk through the server room to get to the break room, creating a security risk. Which solution best balances security and employee convenience?

   • AKeep the current layout and add a security camera in the server room.
   • BRelocate the break room so the server room is not a pass-through, and install a badge reader on the server room door.
   • CAllow employees to pass through but require them to wear badges.
   • DLock the server room and require employees to take a longer route to the break room.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to ensure that only employees with a valid security clearance can enter a specific lab. The lab is located inside a larger building. Which layered physical access control approach is most effective?

   • AUse a shared code for the lab door
   • BPost a sign saying the lab is restricted
   • CUse a single key that opens both the building and the lab
   • DRequire a badge to enter the building and a biometric scan to enter the lab
   Reveal Solution Discussion Select an answer first