Which of the following is a core component of a comprehensive security awareness program?

A one-time orientation for new hires only

A policy that mandates employees use strong passwords

Regularly scheduled training sessions for all employees

An annual security audit of the IT department

A security team is planning a phishing simulation. They want to measure not only who clicks, but also who reports the simulated email. They also want to avoid causing confusion with real phishing emails. Which design is best?

Use a unique subject line and sender address for the simulation, and include a banner that says 'This is a test' in the email body.

Make the simulation as realistic as possible, with no indication that it is a test.

Use a well-known brand logo and urgent language to maximize realism.

Send the simulation only to a small group of employees and do not track reporting.

A security team wants to measure the effectiveness of its phishing simulation program. Which combination of metrics would provide the most comprehensive view of employee behavior?

Time to click and time to report.

Number of employees who clicked and number who reported to their manager.

Number of simulations sent and number of employees who completed the training.

What is the primary purpose of a security awareness program in an organization?

To reduce the likelihood and impact of human errors that could lead to security incidents

To replace technical security controls with employee vigilance

To ensure all employees become security experts

To satisfy regulatory requirements only

Which source of feedback is most valuable for improving a security awareness program?

Feedback from the software vendor that sells the training platform

Feedback from the organization's competitors

Feedback from employees who participate in the training

Feedback from the media about recent security breaches

GIAC Security Leadership

Domain 5Objective 3

Managing Security Awareness GSLC Practice Questions (Page 1)

Part of the Business and Vendor Management domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 4–7 from this objective — we provide 48 practice questions to prepare you well beyond it. (estimate)

48questions here

10free pages

6concepts

Questions 1–5

1foundation · easy
Which of the following is a core component of a comprehensive security awareness program?
Select an answer first
2expert · hard
A security team is planning a phishing simulation. They want to measure not only who clicks, but also who reports the simulated email. They also want to avoid causing confusion with real phishing emails. Which design is best?
Select an answer first
3application · medium
A security team wants to measure the effectiveness of its phishing simulation program. Which combination of metrics would provide the most comprehensive view of employee behavior?
Select an answer first
4foundation · easy
What is the primary purpose of a security awareness program in an organization?
Select an answer first
5foundation · easy
Which source of feedback is most valuable for improving a security awareness program?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.