Managing Security Awareness GSLC Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   What is the purpose of using surveys in a security awareness program?

   • ATo test employees' ability to detect phishing emails
   • BTo gather employees' self-reported knowledge and attitudes about security
   • CTo automatically remediate security vulnerabilities
   • DTo replace the need for technical security controls
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A security awareness program has been running for two years. The team notices that employees in the finance department have a higher click rate on phishing simulations than other departments. Which action is the most appropriate next step?

   • ASend a company-wide email reminding all employees to be careful with email links.
   • BIncrease the frequency of phishing simulations for the finance department to test them more often.
   • CRemove the finance department from future phishing simulations to avoid embarrassment.
   • DProvide targeted, role-based training for the finance department that addresses common financial phishing scams.
   Reveal Solution Discussion Select an answer first
3. 48foundation · easy

   Why is it important to update a security awareness program regularly?

   • ATo comply with a one-time regulatory requirement
   • BTo reduce the cost of the program over time
   • CTo ensure that employees are tested more frequently
   • DTo keep pace with evolving threats and changes in the organization
   Reveal Solution Discussion Select an answer first