1.7 Define, Measure, and Report Security Metrics ISSMP Practice Questions (Page 6)

Questions 26–27

1. 26foundation · easy

   Which metric is most directly associated with the risk of unauthorized access?

   • AAverage time to resolve security incidents
   • BNumber of security awareness training sessions completed
   • CNumber of failed login attempts on critical systems
   • DPercentage of security patches applied within 30 days
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of establishing a baseline for a security metric?

   • ATo ensure the metric is always at a specific value
   • BTo provide a reference point for interpreting current and future values
   • CTo replace the need for thresholds
   • DTo eliminate the need for manual data collection
   Reveal Solution Discussion Select an answer first