The Importance of Security Awareness CT-SEC Practice Questions (Page 5)

Questions 21–23

1. 21application · medium

   A security tester is explaining to a client why human factors are often the weakest link in security. Which example BEST illustrates how human psychology contributes to a security vulnerability?

   • AAn organization fails to patch a critical system promptly
   • BA software vulnerability is exploited by a remote attacker
   • CA firewall is misconfigured, allowing unauthorized access to the network
   • DAn employee shares their password with a colleague because they trust them and want to help them meet a deadline
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is an insider threat?

   • AA threat that is detected only by intrusion detection systems
   • BA threat that only comes from external hackers
   • CA threat that is caused by software bugs
   • DA threat that originates from within the organization, such as an employee misusing access
   Reveal Solution Discussion Select an answer first
3. 23expert · hard

   A security tester is assessing an organization's susceptibility to insider threats. The organization has a high turnover rate, and new employees are given access to sensitive data immediately. The security team is concerned about the risk of data exfiltration by disgruntled employees. Which mitigation strategy would BEST address the human factor in this scenario?

   • AConduct thorough background checks on all new employees before granting access
   • BLimit access to sensitive data to only a few trusted employees
   • CImplement a security awareness program that includes training on the consequences of data exfiltration and the importance of protecting sensitive data
   • DMonitor all employee activity and flag any unusual behavior
   Reveal Solution Discussion Select an answer first