Cisco CyberOps Associate (CBROPS) 200-201Security ConceptsEasy
A company is implementing a new security awareness program. A key component of the program is to educate employees on recognizing and reporting phishing attempts. Which security principle is primarily addressed by this initiative?
- AConfidentiality
- BUser Education
- CAvailability
- DNon-repudiation
Show answer & explanationAnswer & explanation
Correct answer: B. User Education
Security awareness training, particularly for recognizing phishing, directly falls under the umbrella of user education. Educating users is a fundamental security principle aimed at making them the first line of defense against social engineering attacks.
Why the other options are wrong
- A. Confidentiality is about preventing unauthorized disclosure of information, which is a goal indirectly supported by user education, but not the primary principle addressed by the program itself.
- C. Availability ensures that systems and data are accessible when needed, which is a goal indirectly supported by user education, but not the primary principle addressed.
- D. Non-repudiation ensures that a party cannot deny having performed an action, which is typically achieved through digital signatures or logging, not user education.
User Education
The security principle focused on training and informing individuals about security policies, best practices, and common threats to enhance their role in an organization's security posture.
- Crucial for mitigating social engineering attacks.
- Includes training on phishing, password hygiene, and policy adherence.
- Empowers employees as a first line of defense.
Memory trick: People are the Pillars of Protection.