A chief security officer cso is concerned about the number o - CompTIA CAS-005

Question

A Chief Security Officer (CSO) is concerned about the number of successful ransomware attacks that have hit the company. The data indicates most of the attacks came through a fake email. The company has added training, and the CSO now wants to evaluate whether the training has been successful. Which of the following should the CSO implement?

Answers
  1. correct
Explanation

The correct answer is: A. Simulating a spam campaign

To evaluate whether training on email security and phishing awareness has been effective, the best approach is to simulate a phishing or spam campaign. This involves sending fake but realistic phishing emails to employees to test their responses and measure the success of the training.

  • Purpose: Simulated phishing campaigns assess employees' ability to identify and avoid phishing attempts, providing clear metrics on how well they apply their training in real-world scenarios.
  • Evaluation: The results of the simulation (e.g., the number of employees who clicked on the fake email or reported it correctly) provide insights into the effectiveness of the training program.

Why the other options are incorrect:

Conducting a sanctioned vishing attack:

  • Incorrect: Vishing (voice phishing) involves social engineering via phone calls. While useful for testing awareness of phone-based attacks, it does not evaluate email security training.

Performing a risk assessment:

  • Incorrect: A risk assessment identifies vulnerabilities and assesses the likelihood and impact of threats. It does not directly measure the effectiveness of employee training on phishing awareness.

Executing a penetration test:

  • Incorrect: A penetration test simulates cyberattacks to identify vulnerabilities in systems and networks. While valuable for testing technical defenses, it does not focus on evaluating the effectiveness of employee training on phishing attacks.

No Payment Cards Needed

Related Courses

Discover a range of courses designed to provide you with the knowledge and skills needed to excel in your chosen field.

a prepsaret exam featured image
CompTIA Prep

220-1201 - CompTIA A+ Exam Core 1

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

220-1202 - CompTIA A+ Exam Core 2

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud Essentials+ CLO-002

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Network+ N10-009

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Security+ SY0-701

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Data + DA0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Pentest+

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Linux+ XK0-005

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA CySA+ CSO-003

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA DataSys+ DS0-001

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Tech+ FC0-U71

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Cloud+ CV0-004

Start Course Prep
a prepsaret exam featured image
CompTIA Prep

CompTIA Server+ SK0-005

Start Course Prep

Easy way to pass your test within a week with prepsaret

You don’t need one month to study and pass your test.
With Prepsaret, it takes you a few days to grasp all the concepts needed to pass your exams

View Courses Offered