Develop and Optimize Security Metrics. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of a security metric in a cybersecurity program?

   • ATo automate all security controls without human intervention
   • BTo provide a quantifiable measure that supports decision-making and performance evaluation
   • CTo replace the need for detailed incident investigations
   • DTo guarantee that all security risks are eliminated
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary benefit of visualizing security metrics in a dashboard?

   • AIt replaces the need for written reports
   • BIt makes trends and patterns easier to understand at a glance
   • CIt automatically fixes security issues
   • DIt eliminates the need for manual data analysis
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A security team has been tracking 'mean time to respond (MTTR) to critical alerts' for a year. The metric has been steadily decreasing, but the team is concerned that the decrease is due to analysts closing alerts quickly without fully investigating them. What should the team do to ensure the metric remains meaningful?

   • AAdd a quality metric, such as the percentage of closed alerts that were later reopened
   • BIncrease the target for MTTR to make it harder to achieve
   • CKeep the MTTR metric as is, because a decrease is always good
   • DStop reporting MTTR and focus only on the number of incidents handled
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the purpose of establishing a baseline for a security metric?

   • ATo set a fixed value that the metric must always equal
   • BTo provide a reference point for evaluating future performance
   • CTo eliminate the need for ongoing data collection
   • DTo replace the metric with a simpler one
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security team wants to create a dashboard for the SOC analysts. The dashboard should help them prioritize their daily work. Which set of visualizations would be most effective?

   • AA pie chart of alert sources
   • BA gauge showing the current number of open alerts against a target
   • CA table of open alerts sorted by severity and age, with a bar chart of alerts by category
   • DA line chart of alert volume over the past year
   Reveal Solution Discussion Select an answer first