What Should an Administrator Do When Employees Encounter Spoofed Websites?

SY0-701 By islever Editorial Last updated

Short answer

C Implement security awareness training.

Question

An administrator at a small business notices an increase in support calls from employees who receive a blocked page message after trying to navigate to a spoofed website. Which of the following should the administrator do?
  1. Deploy multifactor authentication.
  2. Decrease the level of the web filter settings.
  3. Implement security awareness training. Correct Answer
  4. Update the acceptable use policy.

Key Takeaways

Examines the distinction between technical mitigations and behavioral interventions, trapping candidates who overlook user education in favor of immediate technical adjustments.

This scenario tests the critical role of human factors in cybersecurity defense strategies. Community consensus confirms that security awareness training is the definitive solution to reduce phishing susceptibility and lower support ticket volumes.

Common mistake: Candidates often select Option A (Deploy multifactor authentication), incorrectly assuming that stronger access controls will prevent users from navigating to malicious or spoofed domains in the first place.

Expert Analysis

Why the Answer Is Correct

Security awareness training directly addresses the root cause by educating employees on identifying phishing emails, spoofed URLs, and social engineering tactics. When staff understand how these attacks operate, they become less likely to click malicious links, significantly reducing support calls and potential breaches. CompTIA consistently prioritizes human-centric controls when technical barriers already flag the threat but users persistently attempt access.

Why the Other Options Are Wrong

Deploying multifactor authentication secures account access but does not deter users from visiting dangerous sites or falling for initial deception. Decreasing web filter levels would actively weaken security posture by allowing more malicious traffic through, which contradicts the goal of protecting the network. Updating the acceptable use policy establishes rules but lacks the educational component required to change actual employee behavior and recognition skills.

Community Comment Notes

Reviewers unanimously endorse option C, emphasizing that the surge in blocked pages signals a recurring human error pattern typical of targeted phishing campaigns. Comment [1] highlights that training helps employees recognize phishing and spoofed websites, while Comment [2] explains that the blocked page messages indicate ongoing social engineering attempts that require educational intervention. Several contributors stress that CompTIA favors proactive education over reactive technical tweaks in scenarios involving repeated employee mistakes.

Official Reference

These links open the official vendor documentation in a new tab.

Exam Strategy

When faced with scenarios involving repeated user errors or phishing clicks, always evaluate whether a technical control has already been implemented. If yes, CompTIA expects you to select the human-risk management solution, such as training or policy enforcement with education, to close the behavioral gap.

Community Votes

C
100%

100% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. jafyyy 👍 4
    C. Implement security awareness training This helps employees recognize and avoid phishing & spoofed websites.
  2. Anyio 👍 3 Answered C
    C. Implement security awareness training. Explanation: The increase in blocked page messages indicates employees are attempting to visit spoofed or malicious websites, possibly due to phishing attempts. Security awareness training can educate employees on recognizing phishing attempts, spoofed websites, and other social engineering tactics to reduce the likelihood of future incidents. Other Options: A. Deploy multifactor authentication: While MFA is essential for account security, it does not address the issue of employees unknowingly attempting to access spoofed websites. B. Decrease the level of the web filter settings: This would make the organization more vulnerable to threats by allowing access to malicious sites. D. Update the acceptable use policy: Updating policies is good practice but won't directly address the root cause of employees falling for spoofed sites.
  3. qacollin 👍 3
    C. GPT

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide