6.3 - Collect Security Process Data (e.g., Technical and Administrative) CISSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of a security awareness campaign effectiveness metric?

   • AAmount of disk space used by backups
   • BNumber of servers in the data center
   • CPercentage of employees who clicked a link in a simulated phishing email
   • DTime since the last software update
   Reveal Solution Discussion Select an answer first
2. 22expert · medium

   A security team is investigating a potential insider threat. They suspect that a terminated employee's account was not disabled promptly and may have been used after termination. Which data sources should the team collect to CONFIRM this suspicion?

   • ANetwork traffic logs and firewall logs for the employee's IP address
   • BAccount management logs showing the account's disable date and authentication logs showing logins after that date
   • CAccess review reports from the last quarterly review
   • DEmployee exit interview records and HR termination paperwork
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of a Key Performance Indicator (KPI) for security?

   • ATo predict the likelihood of a future security breach
   • BTo replace the need for regular security audits
   • CTo provide a legal defense in case of a security incident
   • DTo measure the effectiveness of security controls and processes
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of a Key Risk Indicator (KRI) in security?

   • ATo document compliance with regulatory requirements
   • BTo replace the need for risk assessments
   • CTo provide early warning signs of increasing risk exposure
   • DTo measure the efficiency of security operations
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An organization's security awareness program includes annual training and monthly phishing simulations. The CISO wants to measure whether the program is actually reducing risky behavior. Which metric would be the MOST meaningful KPI for this goal?

   • ATrend of employees who click on simulated phishing emails over time
   • BAverage score on the end-of-training assessment
   • CNumber of security awareness posters displayed in the office
   • DPercentage of employees who completed the annual training
   Reveal Solution Discussion Select an answer first