Security Training CT-SEC Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A hospital is updating its security training. The training coordinator is developing a module for nurses and doctors who frequently access patient records on mobile devices. Which combination of content areas is MOST critical for this specific audience to prevent data breaches?

   • ASecure coding practices, network security, and firewall management
   • BBusiness continuity planning, disaster recovery, and risk management
   • CData protection, mobile device security, and incident reporting
   • DPhishing awareness, password hygiene, and social engineering
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   How does security training most directly contribute to mitigating social engineering risks?

   • ABy automatically blocking malicious emails before they reach users
   • BBy teaching employees to recognize manipulation tactics and respond appropriately
   • CBy requiring employees to report all emails to IT for manual review
   • DBy ensuring all employees use the same password for all systems
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has invested heavily in a new, interactive security training platform. To verify that the training is not just 'checking the box' but actually changing behavior, the security team wants to implement a formal testing method. Which approach provides the most reliable evidence of behavior change?

   • AConducting a follow-up quiz 30 days after the training to test knowledge retention.
   • BReviewing training completion certificates and course feedback forms.
   • CAsking managers to informally observe employees and report any security issues.
   • DRunning an unannounced simulated phishing campaign and comparing click rates before and after the training.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company's annual security training program has been running for two years. The results of the latest simulated phishing campaign show that the click rate has plateaued at 10% for the last three campaigns, despite various awareness campaigns. The training manager wants to improve the program. Based on the test results, which adjustment is MOST likely to break the plateau?

   • AIncrease the frequency of the simulated phishing campaigns from quarterly to monthly.
   • BSwitch from e-learning to a classroom-based training format for all employees.
   • CIncrease the difficulty of the simulated phishing emails to make them more realistic.
   • DAnalyze the characteristics of the employees who still click and the types of emails they fall for, then tailor the training content.
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   What is a key advantage of using simulations in security training?

   • AThey provide a realistic, hands-on experience in a controlled environment
   • BThey are only effective for management-level employees
   • CThey are the cheapest delivery method available
   • DThey eliminate the need for any other form of training
   Reveal Solution Discussion Select an answer first