Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
think C
OMG so many tools relying on ChatGPT and Bard to give them answers to easy questions that require only logical thinking. If there are more phishing attempts reported, that would mean that users are more aware of them and are able to recognize them. Meaning the training worked. On the other hand, "no reported SUCCESSFUL phishing attempts" could mean a lot of things - a coincidence, people aren't reading emails, or worse - someone fell for the phishing attempt but haven't reported it or there was no one to report it. In short - it's C.
A: "There have been no reported successful phishing attempts since the training started." Option A demonstrates that the training has successfully reduced the occurrence of successful phishing attempts, which is a primary goal of security awareness programs. It directly measures the program's impact on a critical security risk, making it the most reliable indicator of effectiveness. Options B, C, and D do not directly measure the effectiveness of the program in reducing security risks