Drill #5

Question 1

firewall

Answer 1

software to block unauthorized network access and only permits authorized communications/requests.

Question 2

cloud computing

Answer 2

the practice of using remote servers on the Internet to store, manage, and process data

Question 3

security awareness training (SAT)

Answer 3

Any training to get users to make smarter security decisions and help their organization manage the ongoing problem of social engineering.

Question 4

Kevin Mitnick

Answer 4

known as the “World’s Most Wanted Hacker.” Today, Kevin’s positioned as “The World’s Most Famous Hacker.”

part owner and the Chief Hacking Officer of KnowBe4.

Question 5

learning management system (LMS)

Answer 5

A system for managing and delivering training courses.

Question 6

return on investment (ROI)

Answer 6

amount of return on an investment relative to cost.

Question 7

Shareable Content Object Reference Model (SCORM)

Answer 7

technical standard that governs how learning content and LMS communicate with each other

Question 8

Six Steps to Successful Security Awareness Training

Answer 8

Step 1:
Have a policy, and have each employee read and sign it.

Step 2:
Have all employees take mandatory SAT (online)

Step 3:
Make SAT part of the onboarding process

Step 4:
Regularly test employees

Step 5:
Have employees who fail phishing tests face consequences and remedial training; reward employees with low failure rates.

Step 6:
Send regular security hints and tips to all employees.

Question 9

7 reasons why an organization would outsource security awareness training

Answer 9

Reduce costs
Access to talent
Geographic reach and scalability
Compliance
Mitigate risk
Business Focus
Leverage the cost of technology

Question 10

Defense in depth

Answer 10

having layers of IT security protection in an IT infrastructure and organization

so that security is not dependent on any single layer

1. Policies, Procedures, and Awareness
2. Perimeter
3. Internal Network
4. Host
5. Application
6. Data

Question 11

social engineering indicators (SEI)

Answer 11

A feature of KnowBe4’s simulated phishing campaigns that shows a user the red flags they missed when clicking on a link in a simulated phishing campaign.

Question 12

Artificial Intelligence Driven Agent (AIDA)

Answer 12

AI tool that sends a multi-vector social engineering attack