Security Training CT-SEC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A software company's security team launched a new training program. After the first quarter, the team reports that 95% of employees completed the course and the average quiz score was 92%. However, a subsequent internal assessment showed that employees still frequently reuse passwords across work and personal accounts. Which objective of the security training program is most clearly NOT being met?

   • ARaising awareness of password policies
   • BProviding clear incident reporting procedures
   • CChanging security-related behavior
   • DEnsuring compliance with the training policy
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A security analyst is reviewing the results of a training assessment. The data shows that the IT department scored 95% on the technical quiz, but the finance department scored 70%. However, the finance department has a much lower simulated phishing click rate (5%) than the IT department (15%). What is the MOST LIKELY explanation for this discrepancy?

   • AThe IT department is more likely to click on phishing links because they are overconfident in their technical abilities.
   • BThe quiz for the IT department was easier than the quiz for the finance department.
   • CThe finance department's training was more effective than the IT department's training.
   • DThe phishing simulation emails were more sophisticated for the IT department.
   Reveal Solution Discussion Select an answer first
4. 33foundation · medium

   Which of the following is a quantitative metric for measuring security training effectiveness?

   • APhishing click rate
   • BEmployee satisfaction with the training
   • CFeedback from focus groups
   • DObservations of employee behavior in the office
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security manager has just completed a simulated phishing campaign. The overall click rate was 8%, which is below the industry average of 15%. However, the click rate in the finance department was 25%, while the marketing department was 3%. The manager needs to report on the effectiveness of the training. Which metric provides the MOST actionable insight for improving the program?

   • AThe number of employees who reported the simulated phishing email
   • BThe department-specific click rates of 25% for finance and 3% for marketing
   • CThe overall click rate of 8%
   • DThe comparison of the overall click rate to the industry average
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company's CISO wants to move beyond simple compliance and create a culture where employees actively think about security. The current training is a mandatory annual e-learning module that most employees complete quickly. The CISO wants to change the objective of the training program. Which shift in focus BEST aligns with the goal of creating a security-conscious culture?

   • AShifting the focus from passing a quiz to applying security principles in daily work scenarios.
   • BMaking the training module more visually appealing with high-quality graphics and animations.
   • CIncreasing the passing score on the annual quiz to ensure a higher level of knowledge retention.
   • DReducing the length of the training module to make it less intrusive for employees.
   Reveal Solution Discussion Select an answer first