Study. uk . com
  1. Home
  2. All questions
  3. Question 51

CompTIA Security+ study material · question 51 of 611

A security team wants to know whether awareness training has changed behaviour rather than recall. Which measure fits best?

  1. Click and report rates in simulated phishing
  2. Number of policy documents published
  3. Completion rates for the annual training module
  4. Scores on the end-of-course quiz
Show the answer

Answer: A. Click and report rates in simulated phishing

Simulations measure what people do under pressure. Completion and quiz scores measure exposure and recall.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › AT-2 Literacy Training and Awareness

Challenge yourself on this topic → Study as cards