Isaca Exam CRISC Topic 8 Question 85 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 85
Topic #: 8

Management has required information security awareness training to reduce the risk associated with credential compromise. What is the BEST way to assess the effectiveness of the training?

AConduct social engineering testing.

BAudit security awareness training materials.

CAdminister an end-of-training quiz.

DPerform a vulnerability assessment.

Show Suggested Answer

Suggested Answer: B

by Gracia at Sep 15, 2024, 12:12 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alyce

1 months ago

Wait, they're testing our security awareness, so shouldn't we all just choose D) and try to hack the system? That's the real test, right?

upvoted 0 times

Natalya

1 days ago

We should focus on understanding the material and applying it to our daily work to show that the training is effective.

upvoted 0 times

...

Elza

16 days ago

I agree, choosing D) and trying to hack the system is not the way to assess the effectiveness of the training.

upvoted 0 times

...

Tuyet

18 days ago

No, that's not the right approach. We should take the training seriously and follow the guidelines.

upvoted 0 times

...

Simona

1 months ago

A) Conduct social engineering testing? That's like trying to catch someone in the act. I'd rather just give them the good ol' quiz, C).

upvoted 0 times

...

Stephanie

2 months ago

Hmm, D) Perform a vulnerability assessment? Seems a bit overkill for just checking the training. I'll stick with C) - nice and straightforward.

upvoted 0 times

Juan

10 days ago

C) Monitor employee behavior for changes in security practices

upvoted 0 times

...

Simona

1 months ago

B) Distribute a survey to employees to gauge their understanding

upvoted 0 times

...

Vi

1 months ago

A) Conduct a phishing simulation to test employee response

upvoted 0 times

...

Curt

2 months ago

I'm going with B) Audit security awareness training materials. Checking the content is key to ensuring the training is effective.

upvoted 0 times

Cammy

1 months ago

I think conducting social engineering testing could also be helpful to see if employees are applying what they learned in the training.

upvoted 0 times

...

Chandra

1 months ago

That's a good choice. It's important to make sure the training materials are accurate and up to date.

upvoted 0 times

...

Kenneth

2 months ago

C) Administer an end-of-training quiz seems like the obvious choice here. Gotta test that knowledge, you know?

upvoted 0 times

...

Carma

2 months ago

I believe administering an end-of-training quiz would also be a good way to assess the effectiveness of the training.

upvoted 0 times

...

Cordelia

2 months ago

I agree with Jovita, social engineering testing can really show if the training is effective.

upvoted 0 times

...

Jovita

2 months ago

I think the best way is to conduct social engineering testing.

upvoted 0 times

...