What is the most important training topic in security awareness?

• Physical security

• Types of malware

• Social engineering

• Remote security

• All of the above

Which of the following is not a reason why security awareness training is essential for executives?

• Corporate travel may expose executives to foreign government or business adversaries.

• Greater access to privileges makes executives valuable targets for credential theft.

• Executives are worse at retaining basic security concepts than other employees.

• Cyber espionage campaigns exploit executives who know their organization's sensitive trade secrets.

Why are humans still the weakest link despite training and security resources?

• Threat actors spend their days thinking of new ways to exploit human vulnerabilities and are rewarded for their innovation.

• The average person does not spend all their time thinking about security and may feel powerless to prevent attacks.

• Cybersecurity professionals may be the only people in their organizations who spend their workdays focused on prevention, protection, and mitigation activities.

• All of the above

True or false: Deepfake technology is a business security concern.

• True

• False

Do phishing simulations work?

• Yes, they help identify users susceptible to phishing attacks.

• Yes, they teach users the signs of phishing scams.

• No, they are unethical.

• No, they can have negative side effects.

• All of the above

Which of the following is not an indication of a ransomware infection?

• Alerts that someone is trying to change your password

• A pop-up window demanding a ransom

• Degradation of device performance

• Outdated software

True or false: Although positive reinforcement in safety awareness training can change risky behavior, it can also produce costly side effects, such as damaging employee morale.

• True

• False

What are the most important metrics to consider in security awareness training?

• Training completion rates

• Quiz performance

• Participation metrics

• Human risk scores

What is the best way to identify a phishing email?

• Typographical errors

• Grammatical errors

• Suspicious links

• All of the above

True or false: Passphrases are stronger than passwords.

• True

• False