Security Training CT-SEC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · medium

   What is the primary purpose of including compliance with policies as an objective of security training?

   • ATo shift responsibility from management to employees
   • BTo ensure employees understand and follow the organization's security rules
   • CTo satisfy legal requirements only, regardless of practical impact
   • DTo allow the organization to avoid all security incidents
   Reveal Solution Discussion Select an answer first
2. 7foundation · medium

   Which method is commonly used to test the effectiveness of security training?

   • APerforming a vulnerability scan of the network
   • BAnalyzing firewall rules for misconfigurations
   • CReviewing server logs for unauthorized access
   • DConducting simulated phishing attacks
   Reveal Solution Discussion Select an answer first
4. 8foundation · medium

   Why is security training for IT personnel often more technical than training for general staff?

   • AIT staff are responsible for implementing and maintaining security controls
   • BIT training is always about advanced hacking techniques
   • CGeneral staff do not need any security training
   • DIT staff are the only employees who face security risks
   Reveal Solution Discussion Select an answer first
5. 9foundation · medium

   Why is incident reporting included as a topic in security training?

   • ATo ensure that all incidents are kept confidential and never reported
   • BTo encourage employees to handle incidents themselves without involving IT
   • CTo ensure employees know how to report security incidents promptly and to the right contact
   • DTo teach employees how to investigate security breaches
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is evaluating the effectiveness of its training program. The team has collected the following data: (1) a 95% completion rate for the e-learning module, (2) an average quiz score of 90%, (3) a simulated phishing click rate of 12% (down from 20% the previous year), and (4) a 50% increase in the number of employees reporting suspicious emails to the help desk. Which metric provides the STRONGEST evidence that the training has led to a positive security behavior change?

   • AThe 95% completion rate
   • BThe reduction in phishing click rate from 20% to 12%
   • CThe average quiz score of 90%
   • DThe 50% increase in employees reporting suspicious emails
   Reveal Solution Discussion Select an answer first