Managing Security Awareness GSLC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A regional bank has a security awareness program that consists of an annual 30-minute online course. The bank's CISO wants to reduce the number of employees who fall for credential-phishing emails. The security team has budget for one new initiative. Which initiative should the team implement first?

   • AReplace the annual course with a monthly newsletter containing security tips.
   • BIncrease the annual course length to two hours with more detailed examples.
   • CImplement a mandatory quiz after the annual course with a passing score of 90%.
   • DDeploy a quarterly phishing simulation with immediate feedback for employees who click.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team is reviewing the results of a phishing simulation. They notice that the click rate is low, but the reporting rate is also low. The team suspects that employees are simply deleting the emails without reporting them. What should they do to improve the program?

   • AStop running simulations because they are not effective.
   • BSend a company-wide email criticizing employees for not reporting.
   • CIncrease the difficulty of the simulations to make them more noticeable.
   • DAdd a message to the simulation's landing page that explains the importance of reporting and how to do it.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is an important best practice when designing a social engineering test?

   • ATesting only senior executives because they are the most targeted
   • BUsing personal information of employees to increase realism without consent
   • CEnsuring that the test scenarios are realistic but do not cause harm or distress
   • DConducting tests without informing anyone in the organization
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security team is reviewing the results of its phishing simulation program. The click rate has decreased from 12% to 6% over the past year, but the report rate has also decreased from 18% to 10%. The team is considering whether to adjust the program. Which action is most appropriate based on these results?

   • AConclude that the program is effective because the click rate has decreased and make no changes.
   • BIncrease the frequency of simulations to keep employees alert and improve reporting.
   • CStop the simulation program because the click rate is low and the program is no longer needed.
   • DInvestigate why the report rate is decreasing and consider reinforcing the importance of reporting in training.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security team wants to increase the number of employees who report suspicious emails. They have a positive reporting culture but want to make it even easier for employees to report. What should they implement?

   • AA policy that requires employees to report only if they are certain the email is malicious.
   • BA monthly reminder to report suspicious emails.
   • CA single, well-publicized email address and a simple button in the email client to report suspicious messages.
   • DA mandatory form that requires employees to fill out detailed information about the email.
   Reveal Solution Discussion Select an answer first