User Training and Awareness

Correct Answer: Implement a password management training session for users.

Offering password management training helps users understand the importance and best practices of secure password management. Decreasing complexity, allowing written passwords in public areas, providing common or static passwords all compromise security. Disabling the account lockout policy for the user can be considered after other methods were attempted, but this isn't an initial solution and increases risks.

Correct Answer: Regular training sessions with practical examples

The most effective approach to ensure users understand and comply with the company's data classification policy is through regular training sessions with practical examples. This method is superior for several reasons: 1. Interactive learning: Training sessions allow for direct interaction between instructors and employees, facilitating better understanding and retention of the policy. 2. Practical application: By including practical examples, employees can see how the policy applies to real-world scenarios, making it more relatable and easier to implement in their daily work. 3. Opportunity for questions: Face-to-face sessions provide employees with the chance to ask questions and clarify any uncertainties about the policy. 4. Consistent reinforcement: Regular sessions ensure that the policy remains fresh in employees' minds and adapts to any changes or updates. The other options are less effective: Sending monthly email reminders may be easily overlooked or ignored by busy employees. Posting the policy on the intranet site is passive and doesn't ensure that employees will read or understand it. Incorporating policy compliance into performance reviews may create stress and doesn't necessarily lead to better understanding or day-to-day compliance. Regular training sessions with practical examples provide the most comprehensive and engaging approach to ensuring policy understanding and compliance.

Correct Answer: Their computer may have malware or a keylogger, so recommend running a full system scan and changing the password after the issue is resolved.

The most likely cause is that the user's computer is infected with malware or a keylogger, which can send out spam emails the user's address book. To resolve this issue, it is recommended to run a full system scan to detect and remove any malicious software. After the system is clean, the user should change their email password to prevent unauthorized access. The other answers are incorrect because they do not address the root cause of the problem, which is a compromised computer. Lying, email system malfunctions, or typos in the recipient field would not explain the unauthorized sending of spam to the user's entire address book.