問題文
A insurer's phishing simulation shows that report rates rose but click rates did not fall. The security team is asked what this pattern says about the awareness program. Which reading is best supported?
選択肢
- Technical controls should replace the awareness program, because the flat click rate shows that training cannot change behavior and the budget would be better spent on filtering at the mail gateway.
- The program has succeeded, because the number of reports is the metric that matters most in an awareness program and a rising report rate shows that the staff are now engaged with the security team's messages.
- Staff have learned to report but not yet to recognize so the training should move to the cues that separate a fraudulent message from a genuine one, rather than repeating the reporting route.
- The simulation itself is flawed because a genuine campaign would not produce a rise in reports and a flat click rate at the same time, so the results should be discarded and the exercise repeated.