5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which scenario best illustrates the integration of security program elements?

   • AEmployees receive phishing awareness training, and the data center uses biometric access control
   • BPhysical locks are installed on all doors, but employees are not informed of security policies
   • CA security awareness poster is displayed, but no physical access controls are implemented
   • DThe organization installs a firewall but does not provide any security training
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A hospital has a high rate of security incidents involving employees sharing passwords and leaving doors unlocked. The hospital is subject to strict privacy regulations and cannot afford a security breach. The security team must design a program that addresses both human behavior and physical security. Which approach is most effective?

   • APost signs reminding employees to lock doors and not share passwords
   • BImplement a mandatory annual training that includes real-life scenarios and a policy requiring doors to be locked, with periodic audits
   • CConduct training only for new employees
   • DInstall automatic door locks and require complex passwords
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which component is typically part of a user awareness program?

   • AInstalling security patches on servers
   • BRegular phishing simulation exercises
   • CDesigning network architecture diagrams
   • DConfiguring firewall rules on network devices
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A global company has a remote workforce. The security team must provide security training to employees in different time zones and with varying levels of technical expertise. The training must be effective and measurable. Which training approach best meets these needs?

   • ASchedule a single live webinar for all employees
   • BSend a PDF handbook and ask employees to sign a form
   • COffer a self-paced online course with quizzes and a final assessment
   • DConduct in-person training at each office
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company is expanding its office and must implement a new security program. The budget is limited, and the company has a high turnover rate. The security manager wants to ensure that new employees are quickly trained on security policies and that physical access is tightly controlled. Which approach best balances these constraints?

   • AImplement a self-paced online training module for new hires and use badge access with a centralized revocation system
   • BProvide a training handbook and rely on managers to enforce physical access
   • CUse biometric access for all employees and skip formal training
   • DConduct a full-day in-person training for each new hire and issue physical keys
   Reveal Solution Discussion Select an answer first