Security and Awareness Training NDE Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A company has a high turnover rate and hires new employees frequently. The security team wants to ensure that new hires are quickly brought up to speed on security policies without overburdening the training team. Which approach is most efficient?

   • AAssign each new hire a mentor to explain security policies one-on-one.
   • BProvide a self-paced online onboarding module that new hires must complete within their first week.
   • CHave new hires read the security policy document and sign it.
   • DWait for the next scheduled annual training and include new hires then.
   Reveal Solution Discussion Select an answer first
2. 42application · easy

   A company is updating its security awareness training for all staff. The training must cover the most common attack vectors that target employees directly. Which topics should be prioritized?

   • ACryptographic algorithm selection, PKI management, and certificate lifecycle
   • BSocial engineering, phishing, password hygiene, and safe data handling
   • CDDoS mitigation, firewall rule optimization, and SIEM tuning
   • DPenetration testing methodology, exploit development, and buffer overflow analysis
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A company is launching a new security awareness program. The CISO wants to ensure that the program is not seen as just an IT issue and that it becomes part of the organizational culture. Which approach best distributes responsibility across the organization?

   • AThe security team creates the curriculum, managers reinforce key messages in team meetings, and employees are expected to apply the training in their daily work
   • BEmployees are asked to self-study security topics and report their completion to HR
   • CThe security team designs and delivers all training, and employees are required to complete it annually
   • DManagers are solely responsible for developing and delivering security training to their teams
   Reveal Solution Discussion Select an answer first
5. 44expert · hard

   A company has a mature security awareness program with quarterly training and simulations. The security team wants to maintain momentum but is concerned about 'training fatigue' among employees. Which approach best maintains awareness without causing fatigue?

   • AIncrease the frequency of training to monthly and make simulations more difficult
   • BMake training optional for employees who have passed the last three simulations
   • CKeep quarterly training but vary the content, use micro-learning, and provide positive feedback on reported phishing
   • DStop all training for six months to let employees recover, then restart
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which of the following topics is commonly included in security awareness training?

   • ARecognizing phishing emails and avoiding suspicious links
   • BWriting advanced malware code to test system defenses
   • CPerforming forensic analysis of compromised systems
   • DConfiguring enterprise firewalls and intrusion detection systems
   Reveal Solution Discussion Select an answer first