Exam SY0-601 topic 1 question 340 discussion

A--- Technical: Technical controls are security controls that are executed by technical systems. Technical controls include logical access control systems, security systems, encryption, and data classification solutions. ▶ Managerial: Managerial controls (or administrative controls) include business and organizational processes and procedures, such as security policies and procedures, personnel background checks, security awareness training, and formal change-management procedures. They are usually controlled by and promulgated with people. ▶ Operational: Operational controls include organizational culture and physical controls that form the outer line of defense against direct access to data, such as protecting backup media; securing output and mobile file storage devices; and paying attention to facility design details, including layout, doors, guards, locks, and surveillance systems.

A. Security awareness training is the administrative control that would be MOST effective to reduce the occurrence of malware execution. Malware is often introduced to an organization's network through human error, such as clicking on a malicious link or downloading an infected file. Security awareness training can help educate employees on how to identify and avoid common malware threats, such as phishing attacks, and provide best practices for safe browsing and downloading.

Security awareness training educates employees about the risks associated with malware and provides guidance on how to recognize and respond to potential threats. By increasing employees' knowledge and awareness of malware, they can better identify suspicious emails, links, or attachments, and take appropriate actions to prevent malware execution.

A -addresses preventative measure, C -addresses mitigation. I may be mistaken but I think the keyword of the question is "administrative control" meaning mitigation (reduce the occurrence). Just my 2 cents

"Administrative" is the key

Between social engineering, opening malicious Office attachments, and visiting malicious links from phishing emails, it's GOTTA be A! These cause so much damage due to human error.

A que faz mais sentido é a A

I think only A makes any sense

A. Security Awareness Training

Change control makes no sense in the context of the question. Security Awareness seems the most universal option.

Security Awareness Training. Answer A

it must be A