5.4 - Understand Security Awareness Training CC Practice Questions (Page 5)

Questions 21–23

1. 21foundation · medium

   An organization implements a security awareness program. Which outcome best reflects the program's goal of building a security-conscious culture?

   • AEmployees memorize the security policy document
   • BThe organization purchases more security software
   • CEmployees report suspicious emails to the security team
   • DThe organization eliminates all security incidents
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An employee receives a phone call from someone claiming to be from the IT help desk, asking for the employee's password to 'verify account settings.' The employee recognizes this as a potential social engineering attempt. Which training topic would have best prepared the employee for this situation?

   • AThe dangers of using public Wi-Fi for work-related tasks.
   • BThe importance of locking the workstation when leaving the desk.
   • CPretexting and the importance of verifying the caller's identity through official channels.
   • DPassword complexity requirements and the use of passphrases.
   Reveal Solution Discussion Select an answer first
3. 23application · medium

   A company is updating its security awareness training. The goal is to reduce the risk of account compromise due to weak or reused passwords. Which content should be prioritized in the training?

   • AA demonstration of how to bypass multi-factor authentication prompts when they are inconvenient.
   • BGuidance on writing passwords down and storing them in a secure location, such as a locked drawer.
   • CInstructions on creating unique, complex passwords for each account and enabling multi-factor authentication where available.
   • DA policy requiring password changes every 60 days, regardless of the password's strength.
   Reveal Solution Discussion Select an answer first