Why is security awareness training important for trusted agents?

• A. It has no effect on social engineering.
• B. It reduces social engineering risk and improves policy adherence.
• C. It only teaches hardware maintenance.
• D. It increases risk by sharing passwords.

Answer: (B)

Security awareness training helps trusted agents recognize social engineering and follow security policies in everyday work. It teaches how attackers manipulate people—like phishing attempts or pretexting—and what cues to spot, so risky requests don’t get acted on. At the same time, it reinforces policy adherence, such as proper credential handling, use of strong passwords, least-privilege access, and timely incident reporting. Together, these aspects reduce the chance of a breach caused by human error and ensure procedures are followed consistently. Other statements miss the point: awareness training isn’t only about hardware maintenance, and it shouldn’t increase risk—it's designed to prevent it, for example by discouraging password sharing and promoting secure practices.