CySA+ Test CySA+ Performance Tracking and Feedback 4

Question 1

A security program uses OKRs (Objectives and Key Results). Which example correctly represents a security OKR?

Accepted Answer

Objective: Reduce breach risk; KR: Decrease critical vuln remediation time from 30 to 10 days by Q4

Answer

A well-formed security OKR links an aspirational objective (reduce breach risk) to a measurable, time-bound key result (remediation time improvement).

Question 2

Which practice best ensures that security metrics remain relevant and aligned with evolving business objectives?

Accepted Answer

Review and update metrics regularly against current business goals and threat landscape

Answer

Regular metric reviews ensure alignment with evolving business priorities and the current threat environment, keeping the security program relevant and effective.

Question 3

An analyst is creating a report for the security steering committee. Which data visualization best shows the distribution of incidents by category over 12 months?

Accepted Answer

Stacked bar chart of incident categories per month

Answer

A stacked bar chart effectively shows both the total incident volume and the proportion of each category across multiple time periods.

Question 4

A threat intelligence program tracks 'indicator sharing timeliness.' What does this metric measure?

Accepted Answer

The time elapsed between receiving a threat indicator and sharing it with trusted partners

Answer

Indicator sharing timeliness measures how quickly the organization disseminates actionable threat indicators to partners after receiving them, impacting collective defense.

Question 5

Which of the following is an example of a lagging indicator in a security program?

Accepted Answer

Number of security incidents confirmed last quarter

Answer

Incidents confirmed last quarter are a lagging indicator because they reflect past performance rather than current or predictive security posture.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test CySA+ Performance Tracking and Feedback 4