Back to Asset Security

Security Awareness and Training

5 minutes 5 Questions

Security Awareness and Training are key elements of Asset Security, as they involve educating employees and stakeholders about the organization's security policies, procedures, and best practices. This helps to create a security-conscious culture within the organization, empowering individuals to r…

Test mode:
Start practice test
CISSP - Security Awareness and Training Example Questions

Test your knowledge of Security Awareness and Training

Question 1

A company has experienced an increase in malware infections and realized that many employees are visiting unapproved websites during working hours. What security measure should the company consider?

Correct Answer: Implement a URL filtering system

A URL filtering system prevents visiting unauthorized websites by blocking or allowing traffic based on predefined categories or URL patterns. VPNs provide secure communication, internet safety training is helpful but not foolproof, disabling internet access would be disruptive, personal firewalls monitor traffic per device, and monitoring activity may increase the workload.

Question 2

A company is shutting down one of its office locations, and sensitive information must be securely disposed. Which method is the BEST way to dispose of hardcopy documents?

Correct Answer: Cross-cut shredding

Cross-cut shredding is the best way to securely dispose of hardcopy documents containing sensitive information, as it makes it nearly impossible to reconstruct the documents. Other methods are not secure enough and might lead to unauthorized access or information exposure.

Question 3

During an audit, it is discovered that several employees have shared their login credentials with colleagues. What action should be taken FIRST to prevent this from happening in the future?

Correct Answer: Implement a security awareness program addressing password sharing

The first action should be to implement a security awareness program addressing password sharing to educate employees about the risks associated with sharing credentials. Other actions like disabling accounts, monitoring communications, or increasing penalties don't effectively address the root of the issue.

More Security Awareness and Training questions
17 questions (total)
Start 17 question test