Develop and Optimize Security Metrics. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security team is defining a metric to measure the effectiveness of their security awareness program. The program includes training, phishing simulations, and policy updates. The team wants a single metric that reflects the overall program's impact on reducing human-related security incidents. Which metric would be most appropriate?

   • AReduction in the number of security incidents caused by human error
   • BPercentage of employees who completed the training
   • CNumber of phishing simulation clicks
   • DNumber of policy acknowledgments received
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which characteristic is essential for an effective security metric?

   • AIt changes frequently without a defined baseline
   • BIt is measured consistently and based on reliable data
   • CIt is only known to a few security team members
   • DIt is complex and difficult to understand
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A security team wants to report to the board of directors. Which metric would be most relevant for this audience?

   • AThe number of log sources integrated into the SIEM
   • BThe average CPU utilization of the SIEM servers
   • CThe percentage of critical vulnerabilities remediated within the target timeframe
   • DThe number of firewall rule changes per week
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What makes a security metric actionable?

   • AIt provides a clear signal that leads to a specific decision or response
   • BIt is reported only to senior management
   • CIt is automatically generated without human review
   • DIt is based on a single data source
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which data source is most appropriate for deriving a metric on the average time to detect security incidents?

   • AFirewall configuration backups
   • BVulnerability scan results
   • CIncident tickets with timestamps for creation and detection
   • DUser access review reports
   Reveal Solution Discussion Select an answer first