FirstTry

Objective 5.2

200-301

Describe security program elements (user awareness, training, and physical access control).

Objective 5.2 sits in Security Fundamentals, which carries 15% of the CCNA exam. The questions below are original, written from the official objective title above, and each explanation cites the Cisco page it rests on.

Objective title verbatim from the official objectives. Cisco exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

5-2Security Fundamentals

Your security team mails staff a harmless message built to look like a credential theft attempt and records who clicks the link. What is the purpose of the exercise?

It measures how quickly the mail filter reactsThe exercise reaches staff by design, so it measures people rather than the filter.
It tests practices and raises staff awarenessCorrect · your answerCorrect. It exercises the practices in place and raises awareness among staff.
It identifies staff for disciplinary actionNaming and punishing individuals discourages reporting, which is the behavior the exercise wants.
It certifies the organization against a standardCertification is an audit process and is not what a simulated message establishes.

Correct.

Checked against learn.microsoft.com, August 2026

Concept

A control that depends on people behaving in a certain way cannot be assumed to work; it has to be exercised like any other. Running the attack in a form that causes no harm is what turns an assumption about staff into a measurement.

Why B

The simulated attack tests the security policies and practices already in place and trains the people who receive it, so the awareness of the workforce rises and its susceptibility falls. The click data shows where the training is needed next.

Source

…simulations are benign cyberattacks that you run in your organization. These simulations test your security policies and practices, as well as train your employees…

Microsoft Learn, Simulate a phishing attack with Attack simulation training, checked August 2026
#security program#user awareness#phishing

Now you: objective 5.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

5-2Security Fundamentals

New starters must complete security training in their first week, and the team does not want to send them a simulated attack first. What does the platform provide?

Sample question 2 of 3

5-2Security Fundamentals

A payload is rated low complexity. A team lead reads that as an easy exercise for staff and is corrected. What does low complexity indicate?

Sample question 3 of 3

5-2Security Fundamentals

A hardware vendor's engineer is admitted to a data center floor for a repair. Which arrangement keeps that visit inside the site's access model?

That’s 3 of the full CCNA bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security Fundamentals