Questão 69 — CompTIA SY0-701 CompTIA Security+ Certification Exam
An organization conducts a self-evaluation with a phishing campaign that requests login credentials. The organization receives the following results: * None of the staff were fooled by the attempt due to proper security awareness. * Staff deleted the email without performing any additional actions. Which of the following security practices would add the most value to the organization?
- A. Implement a strict password reset policy for all senior managers after a security event.
- B. Update user guidance to include suspicious incident reporting.
- C. Conduct end-user training regarding spear-phishing attempts to raise awareness.
- D. Require remote workers to use a VPN when connecting to the organization's networks.
Resposta correta:
B
Explicação
Explanation: Correct answer: B. Update user guidance to include suspicious incident reporting. The best answer is B. Update user guidance to include suspicious incident reporting. The phishing simulation results show that users were not fooled, which means awareness training is already helping them avoid credential theft. However, the employees deleted the email without reporting it. That means the organization missed an opportunity to: investigate the message further identify other recipients block similar messages improve incident response visibility update defensive controls quickly The most valuable next step is to train or guide users to report suspicious emails, not just ignore or delete them.
Quer todas as 907 questões por R$ 1,00?