A logistics company wants to embed security awareness into its daily operations. The security manager notices that employees view security as an IT-only concern. Which initiative would best shift this perception and integrate security into the organizational culture?

Establish a dedicated security team that handles all security-related issues and decisions.

Incorporate security responsibilities into job descriptions and performance reviews for all roles.

Create a monthly 'Security Spotlight' newsletter that highlights real incidents and encourages employees to share security tips.

Provide a one-time security awareness event during Cybersecurity Awareness Month.

A non-profit organization with a small budget and a high turnover of volunteers wants to implement a security awareness program. The volunteers handle donor data and use personal devices. The organization's leadership is supportive but has limited time. What is the most practical approach to training frequency and content?

Provide a short, mandatory onboarding module covering data protection and phishing, and send quarterly email reminders with security tips.

Require all volunteers to complete a comprehensive annual training course that covers all security topics in depth.

Conduct monthly in-person training sessions for all volunteers to ensure they stay up to date.

Skip formal training and rely on the volunteer coordinator to verbally remind volunteers about security best practices.

Why is it important to tailor security awareness training for executives separately from general employees?

Executives are immune to social engineering attacks

Executives only need training on technical security controls

Executives have different risk profiles and decision-making responsibilities that require specialized content

Executives do not need security training because they do not use computers

Which of the following is a key topic that should be covered in a security awareness and training program?

Recognizing phishing and social engineering attempts

What is the purpose of using quizzes in a security awareness training program?

To determine which employees should be fired

To punish employees who do not pay attention

To replace the need for other training methods

To test employees' knowledge of the training material

Dell NIST Cybersecurity Framework v2.0

Domain 4Objective 3

Understand the Need for Awareness and Training. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 1)

Part of the NIST Framework: PROTECT Function domain, which accounts for 12% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

32questions here

7free pages

7concepts

12%of the exam

Questions 1–5

1application · medium
A logistics company wants to embed security awareness into its daily operations. The security manager notices that employees view security as an IT-only concern. Which initiative would best shift this perception and integrate security into the organizational culture?
Select an answer first
2expert · hard
A non-profit organization with a small budget and a high turnover of volunteers wants to implement a security awareness program. The volunteers handle donor data and use personal devices. The organization's leadership is supportive but has limited time. What is the most practical approach to training frequency and content?
Select an answer first
3foundation · easy
Why is it important to tailor security awareness training for executives separately from general employees?
Select an answer first
4foundation · easy
Which of the following is a key topic that should be covered in a security awareness and training program?
Select an answer first
5foundation · easy
What is the purpose of using quizzes in a security awareness training program?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.