What is the primary purpose of conducting regular phishing awareness training for employees?

To reduce the likelihood that employees will fall for social engineering attacks

To ensure that all employees can identify the sender's IP address in an email header

To replace the need for technical email filtering controls

To guarantee that no phishing email will ever reach an employee's inbox

A security manager needs to provide a quarterly report to the board of directors on the effectiveness of the security program. The report should include metrics on incident response times, training completion rates, and compliance status. Which reporting approach is most appropriate?

Provide a raw data dump of all incidents, training records, and compliance findings.

Present a detailed technical report with every vulnerability and patch status.

Create a balanced scorecard that summarizes key metrics with trend lines and a narrative explaining significant changes.

Give a verbal summary during the board meeting without any written documentation.

What is the primary purpose of a security communication strategy?

To ensure that security policies and updates are effectively conveyed to all relevant stakeholders

To keep security information confidential from employees

To replace the need for security awareness training

To create a formal record for auditors only

What is the main goal of a comprehensive security training program?

To certify all employees as security professionals

To change employee behavior to reduce security risks

To eliminate the need for security policies

To provide a one-time orientation for new hires

CompTIASecurityX (CASP+)

Domain 1Objective 2

Program Management CAS-005 Practice Questions (Page 2)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

6concepts

20%of the exam

Questions 6–10

6foundation · medium
What is the primary purpose of conducting regular phishing awareness training for employees?
Select an answer first
7application · medium
A security manager needs to provide a quarterly report to the board of directors on the effectiveness of the security program. The report should include metrics on incident response times, training completion rates, and compliance status. Which reporting approach is most appropriate?
Select an answer first
8foundation · medium
What does the 'A' stand for in a RACI matrix?
Select an answer first
9foundation · medium
What is the primary purpose of a security communication strategy?
Select an answer first
10foundation · medium
What is the main goal of a comprehensive security training program?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.