A company has a 'report phishing' button in its email client. However, an analysis of the help desk tickets shows that many employees are forwarding suspicious emails to the help desk instead of using the button. The help desk is overwhelmed and cannot respond to all forwarded emails promptly. What is the MOST effective way to address this issue?

Remove the 'report phishing' button and instruct employees to always forward suspicious emails to the help desk

Ignore the issue and assume employees are reporting the emails effectively

Provide additional training and communications that clearly explain the purpose and correct use of the 'report phishing' button

Increase the help desk staff to handle the forwarded emails

A security manager is designing a tabletop exercise to test the organization's response to a data breach involving customer personal information. The exercise's primary goal is to evaluate the decision-making process for notifying affected customers and regulatory bodies. Which of the following elements is MOST critical to include in the exercise scenario?

A list of all employees' names and their roles in the company

A timeline of events and injects that force participants to make decisions under time pressure

A detailed technical analysis of the malware used in the breach

A pre-written press release for the participants to approve

A company is launching a new security awareness campaign focused on password hygiene. The audience includes both technical staff and non-technical staff in sales and HR. What is the MOST effective approach for the awareness communications?

Post a single poster in the break room with a list of all password policy rules

Send a single, detailed technical email to all employees explaining password hashing algorithms

Create two versions of the communication: a high-level, practical guide for general staff and a more technical bulletin for IT staff

Only communicate the policy to managers and ask them to verbally relay it to their teams

What is the primary purpose of a tabletop exercise?

To deploy new security software

To test the physical security of a facility

To train employees on how to use a fire extinguisher

To test incident response procedures and decision-making in a simulated, discussion-based scenario

Systems Security Certified Practitioner

Domain 1Objective 7

awareness Communications) SSCP Practice Questions (Page 6)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

9concepts

16%of the exam

Questions 26–30

26expert · hard
A company has a 'report phishing' button in its email client. However, an analysis of the help desk tickets shows that many employees are forwarding suspicious emails to the help desk instead of using the button. The help desk is overwhelmed and cannot respond to all forwarded emails promptly. What is the MOST effective way to address this issue?
Select an answer first
27application · medium
A security manager is designing a tabletop exercise to test the organization's response to a data breach involving customer personal information. The exercise's primary goal is to evaluate the decision-making process for notifying affected customers and regulatory bodies. Which of the following elements is MOST critical to include in the exercise scenario?
Select an answer first
28application · medium
A company is launching a new security awareness campaign focused on password hygiene. The audience includes both technical staff and non-technical staff in sales and HR. What is the MOST effective approach for the awareness communications?
Select an answer first
29foundation · easy
What is the primary purpose of a tabletop exercise?
Select an answer first
30foundation · easy
Which social engineering technique involves an attacker physically following an employee through a secured door without using their own badge?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

1.7 - Support And/or Implement Security Awareness and Training (e.g., Social Engineering/phishing/tabletop Exercises/awareness Communications) SSCP Practice Questions (Page 6)

Questions 26–30

A company is launching a new security awareness campaign focused on password hygiene. The audience includes both technical staff and non-technical staff in sales and HR. What is the MOST effective approach for the awareness communications?

What is the primary purpose of a tabletop exercise?

Which social engineering technique involves an attacker physically following an employee through a secured door without using their own badge?

Keep studying — Security Concepts and Practices