7.15 - Address Personnel Safety and Security Concerns CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the PRIMARY purpose of a security awareness program?

   • ATo provide a record of employee training for compliance audits
   • BTo reduce human-related security risks by changing employee behavior and increasing vigilance
   • CTo test the effectiveness of technical security controls
   • DTo enforce security policies through disciplinary actions
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A hospital is updating its emergency management plan to address an active shooter scenario. The security team is determining the security professional's role during the response phase. Which responsibility is most appropriate?

   • AEvacuate all patients and staff immediately without waiting for law enforcement.
   • BLead the medical response to treat the wounded.
   • CCoordinate with law enforcement and manage the building's access control systems to support lockdown procedures.
   • DCommunicate with the media to provide real-time updates.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is launching a security awareness program. The CISO wants to reduce the risk of phishing and insider threats. Which component should be the cornerstone of the program?

   • ARegular simulated phishing exercises with immediate feedback and targeted training for those who fail.
   • BA mandatory annual quiz on security policies.
   • CPosters in common areas reminding employees to be vigilant.
   • DAnnual online training modules that employees must complete.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key component of an effective security awareness program?

   • AFocusing exclusively on technical staff who handle sensitive data
   • BDistributing a security policy document annually without further interaction
   • CA one-time mandatory training session for all new hires
   • DRegularly updated training that covers current threats such as phishing and social media risks
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which policy measure is MOST effective in reducing the security risks associated with employee social media use?

   • AA clear social media policy that defines acceptable use and prohibits sharing confidential information
   • BMonitoring all employee social media accounts continuously
   • CRequiring employees to use pseudonyms on all social media platforms
   • DBlocking all social media websites at the corporate firewall
   Reveal Solution Discussion Select an answer first