5.2 Describe Security Program Elements (user Awareness, Training, and Physical Access Control) 200-301 Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A financial institution has a high rate of employees falling for phishing emails. The security team has limited resources and must choose between implementing a technical email filter or conducting a phishing awareness campaign. The goal is to reduce the number of employees who click on phishing links. Which approach is most effective in the long term?

   • AImplement a policy that punishes employees who click on phishing links
   • BDeploy an advanced email filter that blocks all phishing emails
   • CConduct a phishing awareness campaign with simulated phishing tests and follow-up training
   • DDisable all email links and require employees to type URLs manually
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A financial firm is required by regulations to provide annual security training to all employees. The training must be documented and completed by every staff member. Which method best ensures compliance and accountability?

   • APost training materials on the company intranet
   • BEmail a training PDF to all employees and ask them to confirm receipt
   • CHold a single in-person seminar and take attendance
   • DUse an online training platform that tracks completion and generates reports
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A multinational company has offices in several countries. The security team wants to provide consistent security training across all locations while respecting local regulations. Which training method best supports this goal?

   • AUse a single English-only training video for all offices
   • BProvide training only in the headquarters country
   • CAllow each office to create its own training independently
   • DDevelop a core training module and localize it for language and regional legal requirements
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A government building requires a high level of physical security. Visitors must be identified and escorted at all times. Which physical access control is most appropriate for managing visitor access?

   • AVisitor badges with an escort requirement
   • BBiometric registration for all visitors
   • CA single shared entrance code for visitors
   • DOpen access to all areas with no identification
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   A warehouse facility has a high rate of unauthorized access to the server room. The manager suspects that employees are propping the door open for convenience. Which awareness initiative would most directly address this issue?

   • AChange the door lock to a higher-security model
   • BPost clear signs and conduct a brief team meeting explaining the risk of propping doors open
   • CInstall a louder alarm on the door
   • DAdd more CCTV cameras near the door
   Reveal Solution Discussion Select an answer first