Managing Security Awareness GSLC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   An employee receives an email that looks like it is from the CEO asking for a wire transfer. The employee suspects phishing but is not sure. The company's security awareness program emphasizes incident reporting. What should the employee do?

   • AReply to the email asking for verification of the request.
   • BForward the email to all employees to warn them about the phishing attempt.
   • CDelete the email and ignore it because it is probably a test.
   • DReport the email to the security team immediately without forwarding it to anyone else.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   How does a security awareness program contribute to incident response?

   • ABy ensuring that only the IT department needs to know about incidents
   • BBy teaching employees to recognize potential incidents and report them promptly
   • CBy automatically containing security incidents
   • DBy eliminating the need for a formal incident response plan
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   An employee receives a suspicious email and reports it to the security team. The security team investigates and confirms it is a phishing attempt. What should the security team do next to reinforce the value of reporting?

   • AIgnore the report because the email was already blocked by the filter.
   • BSend a company-wide email naming the employee as a good example.
   • CThank the employee for reporting and provide a brief summary of the investigation results.
   • DRequire the employee to attend additional security training.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   After a year of security awareness training, the security team wants to evaluate whether the program has reduced risky behavior. Which metric would provide the most direct evidence of behavior change?

   • AThe number of employees who report phishing emails to the security team each month.
   • BThe percentage of employees who successfully complete the annual training module.
   • CThe number of security awareness posters displayed in common areas.
   • DThe score on the end-of-training knowledge quiz.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   After a phishing simulation, the security team notices that many employees who clicked the simulated phishing email did not report it. The team wants to improve the reporting rate. Which metric should they focus on and what action should they take?

   • ATrack the reporting rate and provide positive reinforcement for employees who report suspicious emails.
   • BTrack the number of employees who complete the annual training.
   • CTrack the click rate and increase the difficulty of future simulations.
   • DTrack the time it takes employees to delete phishing emails.
   Reveal Solution Discussion Select an answer first