Managing Security Awareness GSLC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team is planning its first phishing simulation. The goal is to measure the organization's baseline susceptibility without causing undue disruption. Which approach best achieves this goal?

   • ASend a highly convincing phishing email to all employees and immediately revoke credentials of those who fail.
   • BSend a low-volume, realistic phishing email to a random sample of employees and track who clicks or enters credentials.
   • CUse a third-party tool that sends a generic phishing email to all employees and reports the click rate.
   • DConduct a simulated phone call (vishing) to all employees without prior notice to test their response.
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   An organization has a mature security awareness program, but the incident reporting rate is low. Employees say they are unsure what constitutes a reportable incident. Which change would most effectively improve the reporting rate?

   • ARequire employees to report all emails that contain attachments or links.
   • BCreate a new reporting tool that automatically forwards suspicious emails to the security team.
   • CProvide clear examples of reportable incidents and a simple reporting process in the training and on the intranet.
   • DIncrease the frequency of phishing simulations to remind employees to report suspicious emails.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary goal of conducting a phishing simulation?

   • ATo identify which employees are not paying attention
   • BTo test the organization's email filtering system
   • CTo punish employees who click on the simulated phishing email
   • DTo educate employees by providing a safe, controlled experience that reinforces recognition of phishing indicators
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company has run phishing simulations for six months. The overall click rate has dropped from 20% to 12%, but the click rate in the finance department remains at 25%. The security manager wants to improve the program. What should the manager do first?

   • ARequire all finance employees to retake the annual security awareness course.
   • BSend a company-wide email warning that future simulations will be more difficult.
   • CAnalyze the finance department's simulation results to identify common patterns and tailor training to those patterns.
   • DDiscontinue simulations for the finance department because they are not effective.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security manager is evaluating the effectiveness of the security awareness program. The program includes annual training, quarterly phishing simulations, and a reporting mechanism. Which metric would provide the most balanced view of the program's impact on employee behavior?

   • AThe number of security incidents reported and the time to respond to each incident.
   • BThe percentage of employees who complete the annual training and the average score on the knowledge assessment.
   • CThe number of phishing simulations sent and the click rate.
   • DThe click rate on phishing simulations and the report rate of suspicious emails.
   Reveal Solution Discussion Select an answer first