1.7 - Support And/or Implement Security Awareness and Training (e.g., Social Engineering/phishing/tabletop Exercises/awareness Communications) SSCP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company with a high turnover rate in its customer service department needs to ensure all new hires receive security awareness training. The training must be completed within the first week of employment. Which implementation approach is MOST suitable?

   • AA comprehensive annual training session for all employees
   • BMandatory instructor-led training sessions held once a month
   • CDistributing a security policy handbook and asking new hires to read it
   • DA self-paced online training module that must be completed during the onboarding process
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a method for gathering feedback to improve a security awareness program?

   • AChecking the number of installed software updates
   • BConducting surveys after training sessions
   • CMonitoring network bandwidth usage
   • DReviewing firewall logs
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is implementing a new security awareness training program. The training is mandatory for all employees, but the company has a high turnover rate and a global workforce. The security team needs to ensure that training is completed and tracked. The company has a limited budget and cannot afford a new learning management system (LMS). What is the MOST appropriate implementation strategy?

   • AUse a spreadsheet to manually track training completion for all employees
   • BMake the training optional to avoid the need for tracking
   • CUse the existing HR system to assign and track training completion, and integrate it with the onboarding process
   • DConduct in-person training sessions at each global office
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which metric is commonly used to measure the effectiveness of a security awareness program?

   • AThe number of security patches applied each month
   • BThe number of firewalls deployed in the organization
   • CThe percentage of employees who fall for simulated phishing emails
   • DThe total amount of data stored in the cloud
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An attacker leaves a USB drive in the company parking lot. The drive is labeled 'Confidential - Employee Salaries.' An employee finds it and plugs it into their work computer out of curiosity. Which social engineering technique is being exploited?

   • AQuid pro quo
   • BPretexting
   • CBaiting
   • DTailgating
   Reveal Solution Discussion Select an answer first