Isaca CISA Exam - Topic 3 Question 65 Discussion

Actual exam question for Isaca's CISA exam

Question #: 65
Topic #: 3

[All CISA Questions]

Which of the following is MOST important to include in security awareness training?

AHow to respond to various types of suspicious activity

BThe importance of complex passwords

CDescriptions of the organization's security infrastructure

DContact information for the organization's security team

Show Suggested Answer

Suggested Answer: A

This is according to the ISACA's IS Auditing Guideline G15 on Security Awareness Training, which states that security awareness training should include 'an understanding of the types of suspicious activity and the appropriate response to them'.

by James at Aug 31, 2023, 04:12 PM

Limited Time Offer

25%

Off

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Layla

3 months ago

D is nice to have, but it won't help in a crisis.

upvoted 0 times

...

Carolann

3 months ago

Wait, are we really not prioritizing A? That seems off.

upvoted 0 times

...

Raina

4 months ago

C is useful, but not as critical as A or B.

upvoted 0 times

...

Truman

4 months ago

I think B is more important. Complex passwords save us!

upvoted 0 times

...

Mirta

4 months ago

Definitely A! Knowing how to respond is key.

upvoted 0 times

...

Leota

4 months ago

I think having contact information for the security team, option D, is crucial too. If something happens, we need to know who to reach out to right away!

upvoted 0 times

...

Aliza

4 months ago

I feel like understanding the organization's security infrastructure, option C, could help employees know what to look out for. But I'm not entirely convinced.

upvoted 0 times

...

Amie

5 months ago

I'm not sure, but I remember a practice question that emphasized the importance of complex passwords. Maybe option B is the key here?

upvoted 0 times

...

Lillian

5 months ago

I think option A is really important because knowing how to respond to suspicious activity could prevent a lot of security breaches.

upvoted 0 times

...

Art

5 months ago

I think the password complexity one is the most important. Weak passwords are a major vulnerability that training needs to address.

upvoted 0 times

...

Rene

5 months ago

Responding to suspicious activity is definitely the most critical part of security awareness. That's where employees can make the biggest difference.

upvoted 0 times

...

Chan

5 months ago

Hmm, I'm not sure about this one. There are a few good options here, but I'll need to think it through carefully.

upvoted 0 times

...

Raul

5 months ago

This seems like a pretty straightforward security awareness question. I'll focus on the key elements of an effective training program.

upvoted 0 times

...

Willard

5 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about how Issues Management can provide a foundation for other Archer solutions.

upvoted 0 times

...

Chan

5 months ago

Hmm, I'm a bit unsure about this one. Implementing VLANs seems like the most logical approach, but I want to make sure I fully understand how that would address the failover and security needs.

upvoted 0 times

...