Exam 312-50 topic 2 question 11 discussion

I sugget B

By conducting a social engineering test, an organization can assess the level of awareness and knowledge of employees with regard to security best practices, and identify areas where additional training may be needed. Vulnerability scanning, application security testing, and network sniffing are all technical assessment methods that focus on identifying vulnerabilities in systems and networks, and do not directly measure the effectiveness of end-user security training. While these techniques are important for overall network security, they do not provide insight into the human factor of security. Therefore, social engineering is the most effective technique for assessing the effectiveness of end-user security training.