2.19 Apply Dashboard Data to Communicate with Technical, Leadership, or Executive Stakeholders 350-201 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When presenting dashboard data to a technical audience, which approach is most appropriate?

   • AProvide a high-level summary and avoid technical details to keep the presentation short.
   • BPresent only the final conclusions without supporting data to save time.
   • CFocus only on business impact and avoid mentioning any technical terms.
   • DInclude specific metrics, indicators, and technical context that allow for in-depth analysis.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of an executive summary of security dashboard data?

   • ATo demonstrate the technical expertise of the security team.
   • BTo replace the need for detailed security reports.
   • CTo enable executives to understand the security posture and make informed decisions.
   • DTo provide a complete technical audit trail of all security events.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security operations center (SOC) analyst needs to brief the network engineering team on a recurring intrusion attempt pattern. The dashboard shows source IPs, destination ports, packet captures, and a time-series of alerts. Which approach best communicates the relevant details to this technical audience?

   • AProvide the raw packet capture files and ask the team to analyze them independently.
   • BPresent the source IPs, destination ports, and packet capture excerpts, then correlate them with the alert time-series to show the attack pattern.
   • CShow only the executive summary slide that highlights the business impact of the intrusion attempts.
   • DSummarize the alert count and state that the network team should review firewall logs.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst is preparing a monthly briefing for the Chief Information Officer (CIO). The dashboard shows a 40% increase in firewall deny events, a 12% increase in successful VPN authentications, and a 5% decrease in malware detections. The CIO asks, 'What is the most important thing I need to know?' Which approach best addresses the CIO's question?

   • AFocus on the decrease in malware detections as the most positive news and recommend celebrating the security team's success.
   • BHighlight the increase in successful VPN authentications as a potential sign of compromised credentials, recommend a review of authentication logs, and note the other metrics as secondary.
   • CExplain that the firewall deny increase is likely due to a recent rule change and is not a security concern.
   • DPresent the raw percentages for each metric and let the CIO draw conclusions.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security manager is preparing a dashboard review for the company's board of directors. The dashboard shows a rising number of phishing emails reported by employees, a recent ransomware infection that was contained, and a decrease in the mean time to respond (MTTR) to incidents. The board is concerned about cyber risk. Which presentation best supports the board's decision-making?

   • AA technical deep-dive into the ransomware strain, including indicators of compromise and the kill chain.
   • BA recommendation to immediately increase the security budget based solely on the phishing increase.
   • CA slide showing the raw count of phishing emails and the MTTR in minutes, with no additional context.
   • DA narrative that explains the phishing increase as a sign of improved employee reporting, the ransomware containment as a success, and the lower MTTR as evidence of a maturing incident response capability.
   Reveal Solution Discussion Select an answer first