Explain How to Define, Measure, and Report on Metrics to Assess and Monitor a Security Programs Effectiveness. CYBERSECURITY-DEFENSE-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is defining metrics for a new security program. The CISO wants to measure the program's overall effectiveness, while the SOC manager wants to measure operational efficiency. Which metric set best balances both needs?

   • ANumber of security incidents and number of vulnerabilities
   • BPercentage of employees trained and percentage of systems patched
   • CTotal security budget and number of security staff
   • DMean time to detect (MTTD) and mean time to respond (MTTR)
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which approach best ensures that a security metrics report is clear and actionable for a non-technical executive audience?

   • AUse visualizations and plain-language summaries that highlight trends and recommended actions.
   • BProvide a comprehensive list of all metrics collected, regardless of relevance.
   • CFocus exclusively on technical details such as detection rule IDs and correlation searches.
   • DInclude raw log excerpts to provide full transparency.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security manager must report on the effectiveness of the phishing simulation program to the executive leadership team. The executives are most concerned about the organization's overall risk posture. Which reporting approach best meets the executives' needs?

   • AShow the click rate trend over the last four quarters with a target line
   • BProvide a detailed list of employees who failed the simulation
   • CExplain the technical details of the phishing templates used
   • DPresent the total number of phishing emails simulated
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security team has set a target of 95% for the percentage of security awareness training completed by employees. After the quarterly training, the completion rate is 92%. What is the most appropriate action for the team to take?

   • ALower the target to 92% to reflect reality
   • BInvestigate the reasons for the shortfall and implement corrective actions
   • CReport the metric as 95% to avoid negative attention
   • DAccept the result because 92% is close to the target
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does an organization assess the effectiveness of its security program using metrics?

   • ABy reviewing the number of security tools deployed in the environment.
   • BBy counting the total number of security alerts generated in a month.
   • CBy relying on the subjective opinion of the security team.
   • DBy comparing current metric values against predefined benchmarks and targets.
   Reveal Solution Discussion Select an answer first