ITPEC IP April 2025 Question 35
ITPEC IP April 2025 — Question 35 of 100
A, B, and D are appropriate — security education should be preventive, organization-wide, and repeated when needed.
A is appropriate because retraining after a breach should address how to prevent recurrence. B is appropriate because new employees need security expectations from the start. D is appropriate because awareness must be maintained regularly and refreshed after incidents. C is false: employees throughout the organization handle information and can create or reduce risk.
Answer (a)
Why not others: (b) includes false statement C; (c) omits the valid new-employee training in B; (d) includes C and omits A and D.
Key rule: Security awareness is a continuing responsibility for everyone, supported by onboarding, periodic education, and targeted retraining after events.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.