A security manager is planning a tabletop exercise for the incident response team. The goal is to test the team's decision-making and communication during a simulated ransomware outbreak. Which of the following is the MOST appropriate first step in conducting this exercise?

Deploy a simulated ransomware payload to a test environment

Shut down the production network to observe the team's reaction

Present a scenario narrative and ask participants to describe their actions and decisions

Distribute a written policy document for the team to read silently

What is a key reason to track completion of security awareness training?

To ensure that all employees have received the required training and to identify gaps

To determine which employees should be terminated

To replace the need for technical security controls

To calculate the exact cost of the training program

Which of the following is an example of a security awareness communication?

A firewall configuration change

A monthly newsletter with tips on recognizing phishing emails

What is the primary difference between phishing and spear phishing?

Phishing is a type of malware, while spear phishing is a type of social engineering

Spear phishing targets specific individuals or groups, while phishing is a mass, untargeted attack

Phishing uses email, while spear phishing uses phone calls

Spear phishing is always more sophisticated than phishing

Systems Security Certified Practitioner

Domain 1Objective 7

awareness Communications) SSCP Practice Questions (Page 2)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

16%of the exam

Questions 6–10

6application · medium
A security manager is planning a tabletop exercise for the incident response team. The goal is to test the team's decision-making and communication during a simulated ransomware outbreak. Which of the following is the MOST appropriate first step in conducting this exercise?
Select an answer first
7foundation · easy
What is a key reason to track completion of security awareness training?
Select an answer first
8foundation · easy
Which of the following is an example of a security awareness communication?
Select an answer first
9foundation · easy
What is the primary difference between phishing and spear phishing?
Select an answer first
10application · medium
A finance executive receives a voicemail from someone claiming to be the company's external auditor. The caller urgently requests the executive's login credentials to access financial records for an 'imminent audit.' The executive recognizes the auditor's name but the voice sounds different. What type of attack is this MOST likely to be?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.