easyMultiple ChoiceObjective-mapped
CS0-003 Practice Question: A security dashboard is being designed for the…
A security dashboard is being designed for the executive team. Which metric is MOST appropriate to display?
⚠ Common exam trap
CompTIA often tests the distinction between operational metrics (for technical teams) and strategic metrics (for executives), and the trap here is that candidates mistake a detailed, operational metric like patch status or alert counts as appropriate for an executive dashboard, ignoring the need for aggregated, trended risk visibility.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Overall risk posture score with trend over time
The executive team requires a high-level, strategic view of security effectiveness, not granular operational data. The overall risk posture score with trend over time directly communicates the organization's security health and whether it is improving or deteriorating, enabling informed decision-making. This aligns with the Reporting and Communication domain's emphasis on translating technical metrics into business-relevant insights.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Current CPU utilization on firewalls
Why it's wrong here
This metric represents a low-level operational performance indicator for network devices. While crucial for network engineers to monitor device health and capacity planning, it provides no strategic insight into the organization's overall security posture or risk landscape for executive decision-making. Executives require aggregated, risk-centric data to understand business impact, not infrastructure performance.
- ✓
Overall risk posture score with trend over time
Why this is correct
This metric offers a high-level, aggregated view of the organization's current security health, synthesizing various underlying security controls and vulnerabilities into a single, comprehensible score. Presenting this score with a trend over time allows executives to quickly grasp whether security efforts are improving or deteriorating, enabling strategic resource allocation and risk management decisions aligned with business objectives. It directly addresses the strategic need for understanding enterprise-wide risk.
- ✗
Patch installation status of all endpoints
Why it's wrong here
The granular status of patch installations across all endpoints is an operational detail critical for IT and security teams responsible for vulnerability management and system hygiene. While vital for reducing attack surface, presenting this level of detail to executives would overwhelm them with tactical information rather than providing the strategic overview of risk and compliance they require. Executives need to know the impact of patching, not the individual status of each patch.
- ✗
Number of IDS alerts per hour
Why it's wrong here
Reporting the raw number of Intrusion Detection System (IDS) alerts per hour provides a tactical, high-volume metric that lacks the necessary context and aggregation for executive-level understanding. Executives are not concerned with the sheer volume of alerts, which can often include false positives, but rather with the actual impact of significant security incidents or the overall effectiveness of threat detection capabilities. They require insights into materialized risks or trends in critical threats, not operational noise.
Go deeper
Related to this question
Learn chapter
Security Metrics and KPIs
Key term
Risk
Risk is the possibility that an event or action will negatively affect an organization's ability to achieve its goals, often measured in terms of likelihood and impact.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This CS0-004 question is part of Courseiva's 236-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.