Exam CS0-001 topic 1 question 301 discussion

Actual exam question from CompTIA's CS0-001

Question #: 301
Topic #: 1

After reading about data breaches at a competing company, senior leaders in an organization have grown increasingly concerned about social engineering attacks. They want to increase awareness among staff regarding this threat, but do not want to use traditional training methods because they regard these methods as ineffective. Which of the following approaches would BEST meet the requirements?

A. Classroom training on the dangers of social media followed by a test and gift certificates for any employee getting a perfect score.
B. Simulated phishing emails asking employees to reply to the email with their updated phone number and office location
C. A poster contest to raise awareness of PII and asking employees to provide examples of data breaches and consequences
D. USB drives randomly placed inside and outside the organization that contain a pop-up warning to any users who plug the drive into their computer

Show Suggested Answer

Suggested Answer: A 🗳️

by s3curity1 at June 1, 2020, 5:48 p.m.

Comments

Submit Cancel

s3curity1

Highly Voted 5 years ago

Classroom training can be considered a traditional training method. I would go with letter B on this one.

upvoted 6 times

Printer_Micromanager

4 years, 11 months ago

I agree. When I think of traditional training methods, the methods that come to mind are classroom training, online training, and computer based training programs.

upvoted 2 times

Takondwa

4 years, 9 months ago

Agreed, B it is.

upvoted 3 times

...

TheThreatGuy

4 years, 11 months ago

Agree. B all the way.

upvoted 3 times

...

John0153

Most Recent 4 years, 6 months ago

Agree with A. Classroom training might be traditional but with the reward system after getting a perfect score will push the students to learn making this the most effective

upvoted 1 times

...

Blind_Hatred

4 years, 11 months ago

The answer is C. A. That's just a standard training session. B. Sending fake phishing mails is A-OKAY, but asking them to send PII is not. C. That's the right one because you're including everyone in the conversation, instead of forcing them to listen to someone droning on about Social Engineering tactics. D. There are inherent security risks related to this option.

upvoted 2 times

fwd

4 years, 8 months ago

which side are you on? test taker or the maker?

upvoted 1 times

...