CompTIA
PT0-002 · Question #84
A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employees who received…
The correct answer is A. Implement a recurring cybersecurity awareness education program for all users. https://resources.infosecinstitute.com/topic/top-9-free-phishing-simulators/
Vulnerability discovery and analysis
Question
A company conducted a simulated phishing attack by sending its employees emails that included a link to a site that mimicked the corporate SSO portal. Eighty percent of the employees who received the email clicked the link and provided their corporate credentials on the fake site. Which of the following recommendations would BEST address this situation?
Options
- AImplement a recurring cybersecurity awareness education program for all users.
- BImplement multifactor authentication on all corporate applications.
- CRestrict employees from web navigation by defining a list of unapproved sites in the corporate
- DImplement an email security gateway to block spam and malware from email communications.
How the community answered
(25 responses)- A56% (14)
- B16% (4)
- C8% (2)
- D20% (5)
Explanation
https://resources.infosecinstitute.com/topic/top-9-free-phishing-simulators/
Topics
#Phishing#Social Engineering#Cybersecurity Awareness#User Education
Community Discussion
No community discussion yet for this question.