CompTIA Security+ (SY0-701) — Question 429

A security officer is implementing a security awareness program and is placing security-themed posters around the building and is assigning online user training. Which of the following would the security officer most likely implement?

Answer options

• A. Password policy
• B. Access badges
• C. Phishing campaign
• D. Risk assessment

Correct answer: C

Explanation

The correct answer is C, as a phishing campaign directly targets user awareness and education about recognizing phishing attempts. The other options, such as a password policy and access badges, focus on technical controls rather than user education, while a risk assessment is more about identifying vulnerabilities than raising awareness.