1.7 - Support And/or Implement Security Awareness and Training (e.g., Social Engineering/phishing/tabletop Exercises/awareness Communications) SSCP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Before clicking a link in an email, what is a safe practice to verify its legitimacy?

   • AHover over the link to preview the actual URL and check if it matches the expected domain
   • BClick the link and see if the website looks professional
   • CCopy the link and paste it into your browser's address bar
   • DCheck if the email has a company logo
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An attacker calls an employee, pretends to be from the IT help desk, and asks for the employee's password to 'fix a problem.' Which social engineering technique is this?

   • APretexting
   • BTailgating
   • CQuid pro quo
   • DBaiting
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of conducting knowledge assessments as part of a security awareness program?

   • ATo evaluate whether employees have learned and retained the security concepts taught
   • BTo rank employees for performance reviews
   • CTo determine which employees should be given access to sensitive data
   • DTo replace the need for technical security controls
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security awareness manager is planning the annual communication calendar. The company has a high-risk user group (finance) that handles wire transfers and a general user group. The budget allows for only one targeted communication per quarter. What is the MOST effective strategy for allocating these communications?

   • ASend one communication per year to all employees and use the remaining budget for a single, large event
   • BSend two general communications to all employees and two specialized communications to the finance group
   • CSend all four communications to the finance group and none to the general user group
   • DSend the same quarterly communication to all employees, focusing on a different topic each time
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a typical component of a security awareness program?

   • AConfiguration of firewall rules
   • BInstallation of endpoint protection software
   • CAnnual penetration testing of the network
   • DRegular phishing simulation exercises
   Reveal Solution Discussion Select an answer first