問題文
A security lead claims that a fully trained workforce removes the need for further email protection work. What does that claim overlook?
選択肢
- It measures and improves how people respond to the techniques it simulates, so it does not protect against techniques it does not cover, and a workforce that performs well on the simulations can still be caught by an unfamiliar one.
- It replaces the need for threat policies once every user has been trained, because a message that nobody acts on causes no harm and the filters exist only to reduce the number of messages people have to judge.
- It guarantees that trained users will not click future phishing links, because the training is assigned specifically to the people who failed and is repeated until they pass, which is what closes the gap the security lead is describing.
- It blocks the real messages that resemble the simulation, because the platform learns the patterns used in the exercises and applies them to incoming mail, so training the workforce also hardens the filters.