Which of the following would be BEST suited for this task?

A security administrator wants to implement a program that tests a user’s ability to recognize attacks over the organization’s email system.

Which of the following would be BEST suited for this task?
A . Social media analysis
B. Annual information security training
C. Gamification
D. Phishing campaign

View Answer

Answer: D

Explanation:

A phishing campaign is a simulated attack that tests a user’s ability to recognize attacks over the organization’s email system. Phishing campaigns can be used to train users on how to identify and report suspicious emails.

References: CompTIA Security+ Study Guide, Exam SY0-601, 4th Edition, Chapter 2:

Technologies and Tools, pp. 85-86.