Security and Awareness Training NDE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company wants to test whether employees can apply their phishing training in a realistic context. Which training delivery method is best suited for this purpose?

   • AA slide-based online course covering phishing examples.
   • BA simulated phishing campaign that sends realistic emails to employees.
   • CAn instructor-led lecture with Q&A.
   • DA written quiz with multiple-choice questions about phishing.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company is developing a security awareness program for two distinct groups: general employees and IT administrators. The IT administrators have advanced technical knowledge but are still targeted by sophisticated phishing. The general employees need basic training. How should the training be structured?

   • AProvide the same basic training to everyone to ensure consistency
   • BOnly train general employees, since IT administrators already know security
   • CGive IT administrators advanced phishing simulations and general employees basic modules, with role-specific content for each
   • DFocus all training on IT administrators and have them train the general employees
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a key topic covered in security awareness training to help protect sensitive information?

   • AAdvanced cryptography algorithms for data encryption
   • BTechniques for social engineering attackers to trick users
   • CMethods to bypass access controls for testing purposes
   • DProper data handling and classification procedures
   Reveal Solution Discussion Select an answer first
5. 24application · easy

   A new employee orientation program is being developed. The HR director asks the security team to include a session that helps new hires understand how to handle sensitive customer data and how to recognize suspicious emails. Which set of topics should be included in this session?

   • ABudgeting for security tools, vendor risk assessment, and security policy legal review
   • BNetwork firewall configuration, intrusion detection tuning, and vulnerability scanning
   • CPhishing identification, password hygiene, and proper data classification and handling procedures
   • DIncident response plan development, forensic analysis, and malware reverse engineering
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A financial services firm is designing a security awareness program for its employees. Which combination of topics is most essential for this audience?

   • APhishing, password hygiene, social engineering, and data handling.
   • BMarketing strategies, customer relationship management, and sales techniques.
   • CNetwork architecture, firewall configuration, and intrusion detection.
   • DProgramming languages, database design, and cloud architecture.
   Reveal Solution Discussion Select an answer first