Managing Security Awareness GSLC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security team wants to measure the effectiveness of its awareness program. They have been tracking the click rate on phishing simulations, but the CISO wants a more comprehensive view. Which additional metric should they track?

   • AThe rate at which employees report simulated phishing emails to the security team.
   • BThe number of employees who complete the annual training course.
   • CThe time it takes to deploy new security policies.
   • DThe number of security incidents that occur each month.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What should employees be taught about reporting a suspected security incident?

   • ATo investigate the incident themselves before reporting
   • BTo report through the designated reporting channel as soon as possible
   • CTo report only if the incident involves a senior executive
   • DTo report only incidents that result in data loss
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A security team is planning a phishing simulation and wants to ensure that employees who fail are educated rather than punished. Which approach aligns with this goal?

   • ASend a generic email to all employees stating that some people clicked and they should be more careful.
   • BProvide immediate, personalized feedback to employees who click, with a link to a short training module.
   • CRequire employees who clicked to retake the entire annual training course.
   • DPublicly post the names of employees who clicked on the simulation.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A multinational organization with offices in three time zones is launching a new security awareness program. The CISO wants to ensure that all employees receive the same core content, but the training team is concerned that a single live webinar will exclude employees in some regions. Which delivery approach best meets the requirement for consistent content while accommodating all employees?

   • ADeliver separate live webinars customized to each region's local threats and regulations.
   • BConduct a single live webinar at a time that is convenient for the largest office and record it for others.
   • CRecord a single webinar and make it available on-demand with a mandatory completion deadline.
   • DSend a PDF summary of the training to all employees and ask them to acknowledge receipt.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   An employee receives an email that looks like it came from the CEO requesting an urgent wire transfer. The employee is suspicious but is unsure whether to report it. Which action by the organization would most effectively encourage the employee to report the incident promptly?

   • AProvide a clear, simple reporting process and reinforce that reporting suspicious emails is encouraged and safe.
   • BDisable the employee's email account until they explain why they did not report it immediately.
   • CRequire employees to forward suspicious emails to their manager, who will decide whether to escalate.
   • DSend a company-wide email warning about the specific phishing attempt and instruct employees to delete it.
   Reveal Solution Discussion Select an answer first