Which of the following is the MOST effective, positive method to promote security awareness?
A.
Competitions and rewards for compliance
B.
Lock-out after three incorrect password attempts
C.
Strict enforcement of password formats
D.
Disciplinary action for noncompliance
Explanation:
Competitions and rewards are a positive encouragement to user participation in the security
program. Merely locking users out for forgetting their passwords does not enhance user
awareness. Enforcement of password formats and disciplinary actions do not positively promote
awareness.