2.19 Apply Dashboard Data to Communicate with Technical, Leadership, or Executive Stakeholders 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A security manager must present to the board of directors and the SOC team after a data breach. The board needs to understand the business impact and the SOC team needs to understand the technical root cause. The dashboard shows the number of records exposed, the attack vector, the affected systems, and the containment status. Which presentation approach best meets both audiences' needs?

   • AGive the board the detailed attack vector and affected systems, and give the SOC team the records exposed and containment status.
   • BProvide only the containment status to both audiences to keep the message consistent.
   • CGive the board a high-level summary of the records exposed and the containment status, and give the SOC team the detailed attack vector and affected systems analysis.
   • DPresent the same detailed technical briefing to both the board and the SOC team, focusing on the attack vector and affected systems.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A security analyst must summarize a complex dashboard report for an executive audience. What is the most effective way to do this?

   • AHighlight only the most critical risks and their potential business impact.
   • BUse as many technical terms as possible to demonstrate the severity of the situation.
   • CList all security metrics without interpretation to let executives draw their own conclusions.
   • DProvide a detailed breakdown of every security event and its technical cause.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is preparing a report for the network security team about a distributed denial-of-service (DDoS) attack. The dashboard shows the attack traffic volume, the source IPs, and the mitigation actions taken. The team needs to understand the effectiveness of the mitigation. Which presentation is most useful?

   • AA pie chart showing the proportion of traffic from each source IP.
   • BA high-level summary stating that the attack was mitigated successfully.
   • CA graph showing the attack traffic volume over time, with annotations indicating when mitigation actions were taken and the resulting drop in traffic.
   • DA list of all source IPs involved in the attack, without any time context.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security director is preparing a presentation for the board of directors. The dashboard shows a 20% increase in the number of security incidents, a 30% decrease in the number of successful phishing attacks, and a 10% increase in the cost of cyber insurance. The board is concerned about the rising cost of insurance. Which presentation best addresses the board's concern?

   • AExplain that the increase in incidents is driving up insurance costs, but the decrease in successful phishing attacks shows that security controls are improving, which may help negotiate better rates in the future.
   • BPresent only the increase in incidents and insurance costs, omitting the decrease in successful phishing attacks.
   • CState that the increase in insurance costs is unavoidable and recommend accepting the higher cost.
   • DRecommend switching to a different insurance provider to reduce costs, without referencing the dashboard data.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A security operations analyst needs to brief the network engineering team about a spike in traffic to a specific internal server. The dashboard shows connection counts, bandwidth usage, and source IP geolocation. Which presentation of the data is most appropriate for this technical audience?

   • AA list of all source IPs with their geolocation, sorted alphabetically.
   • BA pie chart of bandwidth usage by application, without time-series data.
   • CA graph of connection counts over time, broken down by source IP and destination port, with a table of top talkers.
   • DA high-level summary stating that 'traffic increased significantly' and recommending a general review.
   Reveal Solution Discussion Select an answer first