A learning programme sets a goal of reducing susceptibility to social engineering and runs a phishing exercise in support. Which element of the strategy model is the exercise?

Answer: B. A tactic

SP 800-50r1 defines tactics as the tools, methods or mechanisms enabling the programme to pursue an objective, giving a phishing exercise promoting awareness of social engineering as its example.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.3 Aligning Strategies, Goals, Objectives, Tactics