Which control relates to general security awareness training for personnel?

• A. AT-2 Security Awareness Training
• B. AT-4 Security Training Records
• C. CA-3 System Interconnections
• D. FIPS 200

Answer: (A)

This item tests how training is addressed within security controls, specifically general security awareness for personnel. Security Awareness Training is the one that requires giving all personnel baseline awareness training and periodic refreshers so they know how to recognize security risks, follow procedures, and report incidents. The other options focus on different aspects: Security Training Records is about keeping evidence of who completed training, not delivering the training itself; System Interconnections governs how systems connect and share data; FIPS 200 outlines baseline security requirements for federal information systems but does not specify the ongoing awareness training for people. So the choice that directly addresses general security awareness training for personnel is Security Awareness Training.