Exam CS0-002 topic 1 question 395 discussion

From a glance I thought it was A because that sounds obvious but I agree with John Doe. The most common way attackers gain access is from clicking a link or social engineering. Im going with D.

Insider threat is the number one security risk, no matter how advanced your security is. It takes 1 stupid person to mess up.

How can security awareness & compliance help against APT?? APTs are sophisticated attacks that are carried out by well-funded and highly-skilled threat actors, such as nation-state actors or organized crime groups.

Comptia Guide says: 2. What types of controls address risks from unintentional insider threats? Training and awareness programs reduce the chance that insiders will generate risks from ignorance. Procedural controls help to mitigate risks from carelessness and inattention. The presence of elevated risk from inadvertent threat can be assessed by monitoring training adoption and effectiveness metrics.

Security awareness training is a formal process that you can put in place to educate users on the threats they might face—both in the cyberspace and in the physical workplace environment—and how to respond to them. most likely an APT advanced persistent treat is what they trying to avoid by educating people. Since the APT usually change, and get better and more sophisticated you have to make sure that the employees have the most updated information about the possible treats they could face. I hear you? very vague question....

Answer D