CiscoCertified Network Professional Cybersecurity (CBRCOR)
Domain 1Objective 8
1.8 Describe Characteristics and Areas of Improvement Using Common Incident Response Metrics 350-201 Practice Questions (Page 9)
Part of the Fundamentals domain, which accounts for 20% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
15concepts
20%of the exam
Questions 41–43
- 41
A security team has been tracking MTTD for the past two years. The average MTTD for the first year was 5 hours, and for the second year it was 4 hours. However, the number of incidents increased from 50 to 80 in the second year. The team wants to determine if their detection process has truly improved. Which analysis would provide the most accurate conclusion?
Select an answer first - 42
A security manager wants to evaluate whether the SOC's detection performance has improved over the past year. They have historical MTTD data for each quarter. What is the best approach to assess improvement?
Select an answer first - 43
A company's incident response metrics show that MTTC is 4 hours, but MTTR (resolution) is 24 hours. The team suspects that the long resolution time is due to delays in the recovery phase. Which additional metric would best help identify the bottleneck?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-201
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.