Security Training CT-SEC Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A small business owner believes that security is solely an IT problem and that spending on employee training is a waste of money. After a recent malware infection traced to an employee clicking a link in a personal email, the owner is reconsidering. Which argument BEST convinces the owner that security training is a critical investment for the entire organization?

   • ATraining will ensure that employees never make a mistake, eliminating all security risks.
   • BSecurity training is required by most cyber insurance policies, and failing to provide it could void the company's coverage.
   • CEmployees are the first line of defense, and training reduces the likelihood of human error that can lead to costly security incidents.
   • DThe IT team can implement better firewalls and antivirus software to protect the company, making training unnecessary.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A regional bank recently suffered a business email compromise (BEC) incident where an executive assistant wired funds after receiving a spoofed email from the 'CEO'. The bank's annual compliance training covers phishing, but the assistant had completed it 11 months prior. The CISO wants to reduce the likelihood of similar incidents. Which approach best addresses the root cause demonstrated by this incident?

   • AImplement a technical control that automatically blocks all emails with display names matching the CEO's name.
   • BReplace the annual training with a one-time, mandatory e-learning module on BEC scams for all employees.
   • CIncrease the frequency of the existing annual compliance training to a semi-annual schedule for the entire company.
   • DConduct targeted, more frequent phishing simulations for executive assistants and other high-risk roles, with immediate remedial micro-training on failure.
   Reveal Solution Discussion Select an answer first
4. 23foundation · medium

   Based on test results showing that employees frequently fall for phishing emails with urgent language, what is a reasonable adjustment to the training program?

   • AOnly train employees who clicked, and ignore the rest
   • BRemove all phishing-related content from the training
   • CAdd more examples of urgent-language phishing emails and practice exercises
   • DIncrease the difficulty of the simulated phishing emails without any additional training
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   After a simulated phishing campaign, a security analyst reviews the results. The data shows that employees who failed the simulation had, on average, completed the training 8 months ago. Employees who passed had completed it within the last 3 months. The analyst also notes that the 'failed' group is concentrated in the operations department. What is the MOST significant trend indicated by this analysis?

   • AThe training content is not relevant to the operations department's daily work.
   • BThe simulated phishing emails were more sophisticated in the operations department.
   • CThe operations department is inherently more susceptible to phishing than other departments.
   • DKnowledge and vigilance decay over time, and the operations department may need more frequent refresher training.
   Reveal Solution Discussion Select an answer first
6. 25foundation · medium

   How can assessments (e.g., quizzes) be used to test security training effectiveness?

   • ABy replacing the need for any practical exercises
   • BBy evaluating the performance of the training platform
   • CBy measuring the knowledge retained by employees after the training
   • DBy determining the exact number of security incidents that will occur
   Reveal Solution Discussion Select an answer first