Security Metrics Quiz: KPIs & Metrics (CySA+)

1. Which KPI measures the ratio of security incidents to total endpoints?

Incident frequency rate

Endpoint vulnerability index

Detection efficiency score

Compliance gap analysis

Submit

6. Which KPI measures compliance with security policy requirements?

Policy violation rate

Incident response time

System patch level

Threat intelligence updates

7. What does a declining trend in security incidents over time indicate?

All threats have been eliminated

Security controls are becoming more effective

Detection systems are malfunctioning

Fewer employees are using the network

8. Which metric best tracks the success of vulnerability management programs?

Number of vulnerabilities scanned

Time to remediate critical vulnerabilities

Vulnerability disclosure timeline

Security tool licensing costs

9. A company achieves 99.5% availability for critical systems. Which metric category does this represent?

Detection metric

Remediation metric

Availability metric

Compliance metric

10. What is the primary benefit of tracking user access anomalies as a metric?

Reduce IT support tickets

Detect insider threats and compromised accounts

Improve network bandwidth

Simplify password policies

11. Which metric measures the percentage of security incidents detected before they cause harm?

Mean time to detect (MTTD)

Detection rate

False positive ratio

Incident severity index

12. A security team wants to measure how quickly systems return to normal after an incident. Which metric applies?

Recovery time objective (RTO)

Mean time to failure (MTTF)

Mean time to detect (MTTD)

Service level agreement (SLA)

13. Which metric helps measure the financial impact of security incidents?

Recovery time objective (RTO)

Cost of breach (CoB)

System availability percentage

Threat intelligence score

14. What does a low false positive rate in intrusion detection indicate?

The IDS is detecting all attacks

The IDS generates fewer incorrect alerts

The IDS requires more signatures

The network has no threats

15. Which of the following is a lagging security indicator?

Number of security patches deployed

Actual security incidents that occurred

Firewall rule updates

Vulnerability scan completion

16. A company patches 87% of critical vulnerabilities within 48 hours. Which metric does this represent?

Vulnerability disclosure rate

Patch compliance rate

Risk mitigation score

System uptime percentage

17. What is the primary purpose of tracking mean time to detect (MTTD)?

Measure how fast incidents are resolved

Identify how quickly threats are discovered

Determine employee productivity

Calculate budget allocation

18. Which KPI best indicates the effectiveness of security awareness training?

Number of phishing emails sent

Phishing click-through rate

Email filter accuracy

User login failures

19. A security team resolves 95% of vulnerabilities within 30 days. This is an example of which type of metric?

Compliance metric

Remediation metric

Detection metric

Availability metric

20. What does MTTR stand for in security incident response?

Mean time to recover

Maximum threat tolerance rate

Metric tracking threat response

Mean time to report

Security Metrics Quiz: Can You Measure Success?