N10-005 · Question #562
Which of the following is the BEST way to mitigate security threats on a network?
The correct answer is B. User training. User training is the most effective proactive measure to mitigate network security threats because the majority of successful attacks exploit human error or lack of awareness.
Question
Which of the following is the BEST way to mitigate security threats on a network?
Options
- ASocial engineering
- BUser training
- CIncident response
- DMan-in-the-middle
How the community answered
(44 responses)- A2% (1)
- B91% (40)
- C5% (2)
- D2% (1)
Why each option
User training is the most effective proactive measure to mitigate network security threats because the majority of successful attacks exploit human error or lack of awareness.
Social engineering is an attack technique used by adversaries to manipulate people, not a defensive mitigation measure.
Most security incidents - including phishing, credential theft, and malware installation - succeed because end users unknowingly facilitate them. Comprehensive security awareness training teaches employees to recognize threats, follow safe practices, and respond correctly, addressing the human element that technical controls alone cannot fully protect. This makes user training the broadest and most cost-effective mitigation strategy.
Incident response is a reactive process for handling security events after they occur, not a proactive threat mitigation strategy.
Man-in-the-middle is an attack type, not a security mitigation measure.
Concept tested: Security awareness training as threat mitigation
Source: https://csrc.nist.gov/publications/detail/sp/800-50/final
Topics
Community Discussion
No community discussion yet for this question.