5.6 Security Awareness

Question 1

What is the purpose of running a phishing campaign within a company?

Answer 1

To determine how many employees would click a phishing link in a corporate email.

Question 2

How can a company execute a phishing campaign?

Answer 2

By sending emails to the user community and tracking who clicks on the emails.

Question 3

What type of report does an automated phishing system provide?

Answer 3

Reports on opens, clicks, and any interaction with the phishing email.

Question 4

What happens if a user clicks on a phishing link?

Answer 4

They receive an automated email informing them of their mistake and may need to undergo additional training.

Question 5

What should users look for to recognize phishing emails?

Answer 5

Spelling or grammatical errors, inconsistencies in the domain name, unusual attachments, and requests for personal information.

Question 6

What is the ideal function of an email filter regarding phishing attempts?

Answer 6

To block phishing attempts before they reach a user’s inbox.

Question 7

What should users know about clicking links and running attachments in emails?

Answer 7

They should never click links or run attachments from inside an email.

Question 8

What is the process for reporting suspected phishing emails?

Answer 8

There should be a well-known process for reporting to the IT security team.

Question 9

What is ‘Anomalous behavior recognition’?

Answer 9

Identifying unusual behavior on a user’s workstation that may indicate security risks.

Question 10

What types of risky behaviors might be monitored?

Answer 10

• Modifying a host file
• Replacing core operating system files
• Uploading sensitive files
• Unexpected logins from different countries
• Increased data transfers
• Unintentional mistakes like typing the wrong domain

Question 11

What is required for a security team to be aware of anomalous behaviors?

Answer 11

Constant monitoring and reporting of security events.

Question 12

What should be included in automated reporting for security metrics?

Answer 12

• Phishing click rates
• Password manager adoption
• Multifactor authentication use
• Other important security metrics

Question 13

What is the goal after a user clicks a phishing link?

Answer 13

To provide user training to make them aware of the issue.

Question 14

What is the role of the security awareness team?

Answer 14

To monitor, report, and train users on security issues.

Question 15

What types of materials can the security team create to inform users about security issues?

Answer 15

• Emails
• Posters
• Customized training based on job function

Question 16

How can the security awareness team track the effectiveness of their training efforts?

Answer 16

By using automated reporting systems to create detailed metrics.

Question 17

What should the training materials created by the security awareness team address?

Answer 17

IT security and compliance requirements.

Question 18

Where might you find evidence of a company’s security awareness efforts?

Answer 18

In office buildings through classroom training, posters, and information about security concerns.

Question 19

What is the importance of correlating training efforts to overall security?

Answer 19

To assess the effectiveness of security measures and identify areas needing emphasis.