Security and Awareness Training NDE Practice Questions (Page 10)

Questions 46–47

1. 46foundation · easy

   Why is continuous security awareness training necessary in an organization?

   • ABecause employees forget everything after a single training session
   • BBecause it eliminates the need for technical security controls
   • CBecause it is a legal requirement in all industries
   • DBecause new threats emerge regularly and employees need to stay updated
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A security manager must justify the budget for a new security awareness program. The CFO wants proof that the program reduces risk. The manager has historical data on phishing simulation click rates, malware incidents, and helpdesk tickets. Which approach provides the strongest evidence of the program's effectiveness?

   • AShow the results of a single post-training quiz with high scores
   • BCompare phishing simulation click rates and security incident reports before and after the program, while controlling for other security improvements
   • CPresent anecdotal stories from employees who avoided phishing emails
   • DReport the number of employees who completed the training modules
   Reveal Solution Discussion Select an answer first