5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is building a new headquarters. The security team is tasked with designing a comprehensive security program. They have a limited budget and must choose between investing in physical access controls (such as mantraps and biometrics) or user awareness and training programs. Which approach is most likely to result in a balanced and effective security program?

   • AInvest only in physical controls, as they are more reliable than human behavior.
   • BDelay all security investments until after the building is complete.
   • CInvest only in awareness training, as it is cheaper and covers all threats.
   • DInvest in both physical controls and awareness training, prioritizing high-risk areas for physical controls and providing ongoing training for all employees.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A manufacturing company has a high rate of tailgating at its main entrance. The security manager wants to reduce tailgating without slowing down employee entry during shift changes. Which solution best balances security and convenience?

   • AInstall a speed gate with a badge reader that allows one person per badge
   • BPost a security guard to monitor the entrance
   • CUse a traditional turnstile that requires a badge swipe
   • DRemove the badge requirement and rely on employee recognition
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A data center operator wants to prevent unauthorized individuals from following an authorized employee through a secure entrance. Which physical control is designed specifically to address this risk?

   • AProximity card reader
   • BMantrap
   • CBiometric scanner
   • DCCTV camera
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company is rolling out a new security awareness program. The CISO wants to reduce the risk of tailgating at the main entrance and phishing emails that impersonate the IT help desk. Which combination of program elements would best address both risks?

   • APost signs reminding employees not to share passwords and issue badges with photo IDs.
   • BInstall mantraps at the entrance and send monthly simulated phishing emails with follow-up training for those who click.
   • CRequire all employees to use biometric scanners and provide a one-time security awareness video at onboarding.
   • DDeploy an email spam filter and add a security guard at the reception desk.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company is designing a new office. The security manager wants to ensure that employees understand the importance of not sharing access badges and that the physical entrance uses a badge reader. Which combination of measures best integrates user awareness and physical access control?

   • AUse a simple lock and key with no training
   • BConduct badge-use training and install a badge reader that logs entry attempts
   • CProvide training on badge use but do not install any physical control
   • DInstall a badge reader and rely on employees to read the policy on their own
   Reveal Solution Discussion Select an answer first