Security Training CT-SEC Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A multinational corporation with 10,000 employees across different time zones needs to deliver security training. The training must be consistent, trackable, and allow employees to complete it at their own pace. However, the CISO is concerned that purely self-paced e-learning often leads to passive clicking. Which delivery method BEST balances consistency, scalability, and active engagement?

   • AInstructor-led classroom sessions scheduled at each regional office
   • BA one-time, company-wide webinar that is recorded for later viewing
   • CSelf-paced e-learning modules with integrated knowledge checks and scenario-based questions
   • DA gamified mobile app with leaderboards and badges, used as a voluntary supplement
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   Which statement best explains why security training is critical for organizational security?

   • AIt primarily reduces human error and mitigates social engineering risks.
   • BIt is only necessary for new employees during onboarding.
   • CIt guarantees that employees will never fall for phishing attacks.
   • DIt eliminates the need for technical security controls.
   Reveal Solution Discussion Select an answer first
4. 13foundation · medium

   Which statement accurately compares e-learning and classroom training for security awareness?

   • AE-learning is more flexible and scalable, while classroom training allows for live interaction and discussion
   • BClassroom training is always more effective than e-learning
   • CClassroom training cannot include hands-on exercises
   • DE-learning is only suitable for technical staff
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A large retail company is designing role-based security training. The IT team manages firewalls, servers, and the company's Active Directory. The finance team processes invoices and wire transfers. The sales team uses CRM software and emails clients. Which training approach BEST addresses the distinct needs of these three groups?

   • AProvide advanced technical training to IT, and a basic compliance module to finance and sales, with no other differentiation.
   • BDeliver identical training to all employees to ensure a consistent security culture and simplify administration.
   • CFocus all training on phishing simulations, as it is the most common attack vector for all roles.
   • DProvide the same baseline training to all employees, with additional technical modules for IT and a focus on financial fraud for finance.
   Reveal Solution Discussion Select an answer first
6. 15foundation · medium

   Which of the following is a key objective of security training?

   • ATo provide a one-time orientation for new hires only
   • BTo raise awareness, change behavior, and ensure compliance with policies
   • CTo ensure employees memorize the company's security policy word-for-word
   • DTo replace the need for security audits
   Reveal Solution Discussion Select an answer first