Exam CISSP-ISSMP topic 1 question 38 discussion

Actual exam question from ISC's CISSP-ISSMP

Question #: 38
Topic #: 1

You work as a security manager for SoftTech Inc. You are conducting a security awareness campaign for your employees. One of the employees of your organization asks you the purpose of the security awareness, training and education program. What will be your answer?

A. It improves the possibility for career advancement of the IT staff.
B. It improves the security of vendor relations.
C. It improves the performance of a company's intranet.
D. It improves awareness of the need to protect system resources.

Show Suggested Answer

Suggested Answer: D 🗳️

by tld1486905 at Dec. 16, 2024, 5:41 p.m.

Comments

Submit Cancel

tld1486905

2 months, 1 week ago

Selected Answer: D

Effective security awareness training focuses on engaging today’s workforce to reduce user risk. Many security awareness training programs ignore education best practices, delivering training in one-off sessions that overwhelm users with information or worse, are forgettable. For training to stick, it needs to be persistent, delivered regularly in small doses to fit employees’ busy schedules. Most importantly, positive reinforcement and humor performs better than fear-based or boring messaging to improve retention of critical security topics.

upvoted 1 times

...

Exam CISSP-ISSMP All Questions

View all questions & answers for the CISSP-ISSMP exam

Exam CISSP-ISSMP topic 1 question 38 discussion

Comments

tld1486905

SY0-701