CySA+ Test CySA+ Performance Tracking and Feedback 2

Question 1

A SOC manager wants to measure how quickly analysts contain threats after detection. Which KPI best captures this?

Accepted Answer

Mean Time to Contain (MTTC)

Answer

Mean Time to Contain (MTTC) measures the elapsed time from detection to the point where the threat is isolated and no longer spreading.

Question 2

Which metric best indicates the effectiveness of a security awareness training program over time?

Accepted Answer

Phishing simulation click-through rate trend

Answer

A declining phishing simulation click-through rate over successive campaigns directly measures behavior change resulting from awareness training.

Question 3

A CISO reviews a report showing 95% of critical vulnerabilities are patched within the SLA window. This is an example of a:

Accepted Answer

Key Performance Indicator (KPI)

Answer

A patch compliance rate measured against an SLA target is a classic Key Performance Indicator (KPI) for vulnerability management.

Question 4

After an incident, an analyst documents that the initial alert fired 4 hours before analysts began investigation. This gap represents which metric?

Accepted Answer

Mean Time to Acknowledge (MTTA)

Answer

Mean Time to Acknowledge (MTTA) measures the time between an alert firing and an analyst beginning active investigation.

Question 5

Which dashboard component best helps management understand cybersecurity posture trends across multiple quarters?

Accepted Answer

Rolling trend line charts for key metrics

Answer

Rolling trend line charts aggregate historical metric data to show directional improvements or degradations in security posture over time.

CySA+ Practice Test