Explain How Continuous Process Improvement Can Enrich and Expand a Metrics Driven Security Programs Efficacy. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security program has a mature metrics dashboard, but the CISO feels the program is not improving despite good metrics. The team reviews the same metrics each month without changing any processes. How can CPI help expand the value of the metrics?

   • ABy automating the dashboard so that it requires less manual effort to produce.
   • BBy using the metrics as a baseline to identify areas for experimentation and then testing changes in a controlled manner.
   • CBy adding more metrics to the dashboard to provide a more comprehensive view of the security posture.
   • DBy benchmarking the metrics against industry peers to identify best practices.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team is implementing PDCA for the first time. They have completed the 'Plan' phase and are about to start the 'Do' phase. However, they are concerned that the changes they plan to test may have unintended consequences on other security controls. How should they proceed in a CPI-aligned way?

   • ASkip the 'Do' phase and go directly to 'Check' by analyzing the planned changes theoretically.
   • BImplement the changes across the entire environment to get a complete picture of the impact.
   • CImplement the changes on a small scale, monitor the selected metrics and also watch for any adverse effects on other controls.
   • DDelay the implementation until all potential unintended consequences can be predicted with certainty.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team has been using a metrics-driven approach but has not seen significant improvements in security posture. The team lead believes that CPI is the solution, but some team members are skeptical because they think CPI is just another management fad. What is the most compelling argument for CPI that the team lead can make?

   • ACPI is a widely adopted methodology in other industries, so it must be effective.
   • BCPI will automatically improve the security posture without requiring additional effort from the team.
   • CCPI provides a structured, iterative approach that uses metrics as feedback to continuously refine processes, leading to sustained improvements over time.
   • DCPI is the only way to improve security metrics, so the team has no choice but to adopt it.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In a metrics-driven security program, what is the primary role of a feedback loop in CPI?

   • ATo automatically remediate all security incidents without human intervention.
   • BTo replace the need for security metrics altogether.
   • CTo provide data that informs iterative adjustments to security controls and processes.
   • DTo ensure that security metrics remain static and unchanged over time.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   During a CPI cycle, a security metric reveals that the percentage of phishing simulations reported by employees has dropped below the target. What is the most appropriate corrective action?

   • AInvestigate why reporting rates are low, then implement targeted training and awareness campaigns.
   • BIncrease the frequency of phishing simulations to improve reporting rates.
   • CDiscontinue the phishing simulation program because the metric is not improving.
   • DAdjust the target metric to make it easier to achieve.
   Reveal Solution Discussion Select an answer first