Understand the Need for Awareness and Training. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   Why is it important to update security awareness training content regularly?

   • ATo replace all other security controls
   • BTo keep training materials from becoming outdated and to address evolving threats
   • CTo comply with a legal requirement to update training monthly
   • DTo make training longer and more detailed each time
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A global software company with remote employees across multiple time zones wants to improve its security awareness training. The training team is considering different delivery methods. Which combination of methods would best engage a distributed workforce and provide measurable outcomes?

   • AMandatory in-person instructor-led sessions held at the company headquarters twice a year.
   • BSelf-paced online modules combined with periodic phishing simulations and a dashboard to track completion and performance.
   • CA one-time interactive webinar that all employees must attend live, followed by a quiz.
   • DPosting security tips on the company intranet and relying on employees to read them voluntarily.
   Reveal Solution Discussion Select an answer first