QUESTION 5

1. Security awareness training is designed to mitigate the risks and threats identified in:

A. all seven domains of a typical IT infrastructure.

B. the System/Application Domain.

C. the LAN Domain and the LAN-to-WAN Domain.

D. the User Domain and the Workstation Domain.

QUESTION 6

1. Your security awareness training policy will directly influence:

A. A. how motivated and effective your employees are.

B. B. your employees Internet usage and how many e-mails they send.

C. C. how well your employees value and protect your organizations security position.

D. D. what your employees will do to influence others security efforts.

QUESTION 7

1. The policy statement should be as concise and readable as possible, for example, no more than:

A. one to three sentences.

B. one to three paragraphs.

C. two to three pages.

D. five to ten pages.

QUESTION 8

1. The entire policy should be as concise and readable as possible, for example, no more than:

A. one to three sentences.

B. one to three paragraphs.

C. two to three pages.

D. five to ten pages.

QUESTION 9

1. To be sure your security awareness training policy is effective, it should align well with:

A. the objectives of executive management.

B. the objectives of the Human Resources Department.

C. the security awareness training policy of other organizations.

D. other governing documents in the organization.

QUESTION 10

1. To be sure your security awareness training policy is effective, it should:

A. be applicable to all audiences.

B. speak directly to the target audience.

C. include technical terms to impress the target audience.

D. identify the security mistakes made by each member of the target audience.