A company wants to quantify the financial impact of a recent data breach. They calculate the cost of forensic investigation, legal fees, and customer notification, as well as the lost productivity and reputational damage. Which metric best captures the total financial impact, and what should the company do to improve cost management?

MTTD; reduce detection time to lower the cost of the incident.

MTTR (resolution); reduce resolution time to lower the cost of the incident.

False positive rate; reduce false positives to lower the cost of the incident.

Cost per incident; track both direct and indirect costs and benchmark against industry averages.

What is the primary purpose of collecting incident response metrics?

To guarantee that future incidents will be prevented

To assign blame to specific team members when an incident occurs

To evaluate the performance of the incident response process and identify areas for improvement

To replace the need for post-incident reviews

What is the primary purpose of benchmarking incident response metrics against industry standards?

To evaluate performance relative to peers and identify areas for improvement

To replace the need for internal trend analysis

To guarantee that incidents will be prevented

To determine the exact cost of every incident

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 1Objective 8

1.8 Describe Characteristics and Areas of Improvement Using Common Incident Response Metrics 350-201 Practice Questions (Page 4)

Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

15concepts

20%of the exam

Questions 16–20

16application · medium
A company wants to quantify the financial impact of a recent data breach. They calculate the cost of forensic investigation, legal fees, and customer notification, as well as the lost productivity and reputational damage. Which metric best captures the total financial impact, and what should the company do to improve cost management?
Select an answer first
17foundation · easy
What is the primary purpose of collecting incident response metrics?
Select an answer first
18foundation · easy
Which metric measures the average time from when an incident occurs to when it is first detected?
Select an answer first
19foundation · easy
Which metric measures the time from detection to the initial assessment and prioritization of an incident?
Select an answer first
20foundation · easy
What is the primary purpose of benchmarking incident response metrics against industry standards?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

1.8 Describe Characteristics and Areas of Improvement Using Common Incident Response Metrics 350-201 Practice Questions (Page 4)

Questions 16–20

What is the primary purpose of collecting incident response metrics?

Which metric measures the average time from when an incident occurs to when it is first detected?

Which metric measures the time from detection to the initial assessment and prioritization of an incident?

What is the primary purpose of benchmarking incident response metrics against industry standards?

Keep studying — Fundamentals