5.4 - Understand Security Awareness Training CC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A financial services firm is required by industry regulations to provide security awareness training to all employees. The training must be documented and completed annually. Which action best demonstrates compliance?

   • APost a notice on the employee intranet stating that training is mandatory.
   • BTrack employee completion of the training in a learning management system and retain records for audit purposes.
   • CSend a company-wide email reminding employees to read the security policy.
   • DConduct a security awareness presentation during new employee orientation only.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company's security team is designing a training module to help employees recognize social engineering. Which scenario should be included to cover the technique of baiting?

   • AAn attacker tailgates behind an employee through a secure door.
   • BAn attacker leaves a USB drive labeled 'Confidential' in the parking lot, hoping an employee will plug it into a work computer.
   • CAn attacker sends an email with a link to a fake login page to steal credentials.
   • DAn attacker calls an employee pretending to be from the IT department and asks for their password.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An organization is implementing multi-factor authentication (MFA) for all user accounts. During training, an employee asks why MFA is necessary if they already use a strong password. Which response best explains the value of MFA?

   • AMFA adds an extra layer of security so that even if a password is compromised, an attacker cannot access the account without the second factor.
   • BMFA speeds up the login process by reducing the number of steps.
   • CMFA is required by law, and failure to use it results in fines.
   • DMFA eliminates the need for strong passwords, so employees can use simpler ones.
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   Which of the following best describes the primary purpose of security awareness training in an organization?

   • ATo eliminate the need for security policies
   • BTo ensure all employees become security experts
   • CTo reduce human error and foster a security-conscious culture
   • DTo replace technical security controls with employee knowledge
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An employee receives a text message that appears to be from their bank, asking them to click a link to verify their account. The employee is unsure if it is legitimate. What should the employee do?

   • AReply to the text message asking for more information.
   • BClick the link in the text message to see if the website looks legitimate.
   • CForward the text message to friends to ask if they received it too.
   • DContact the bank using the phone number on the back of their debit card to verify the message.
   Reveal Solution Discussion Select an answer first