1.12 - Establish and Maintain a Security Awareness, Education, and Training Program CISSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security awareness program has been running for two years. The training manager wants to evaluate its effectiveness beyond just test scores. Which approach would provide the most comprehensive and actionable feedback?

   • ADistribute a post-training survey asking employees to rate the relevance and usefulness of the training content.
   • BReview the training completion rate and the average final exam score for all employees.
   • CCombine quantitative metrics (phishing click rates, incident reports) with qualitative feedback (surveys, focus groups) to assess both behavior and perception.
   • DTrack the number of security incidents reported by employees to the help desk over time.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company's security team wants to improve the effectiveness of its annual security training. The team has noticed that employees are not retaining information from the long, lecture-style modules. Which change is most likely to improve knowledge retention?

   • AMake the training optional and only for employees who are interested.
   • BBreak the training into shorter, interactive modules with quizzes and scenario-based exercises.
   • CIncrease the length of the training sessions to cover more material in detail.
   • DProvide the training as a single, comprehensive document for employees to read at their own pace.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which technique is specifically designed to test and improve employees' ability to recognize and respond to deceptive emails by sending them realistic but harmless simulated messages?

   • ASecurity champions
   • BSocial engineering simulation
   • CGamification
   • DPhishing campaign
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's annual security training includes a module on ransomware. The training team is updating the content for the next cycle. Which addition would best reflect the objective to include emerging technology content?

   • AA new section explaining how attackers are using cryptocurrency to demand and launder ransom payments, and how to recognize suspicious payment requests.
   • BA new case study on a historical ransomware attack from five years ago.
   • CA revised section on the importance of offline backups and the 3-2-1 backup rule.
   • DA reminder of the company policy on reporting ransomware incidents to the IT help desk.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which method is most effective for measuring whether employees have actually learned and retained the content of a security awareness training program?

   • AFeedback surveys
   • BPost-training assessments
   • CNumber of training sessions offered
   • DAttendance tracking
   Reveal Solution Discussion Select an answer first