CS0-003 Reporting and Communication Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Patch SLA compliance percentage

  Why this is correct

  This metric directly measures the effectiveness and efficiency of the patch management process by tracking the percentage of vulnerabilities remediated within established Service Level Agreement (SLA) windows. It provides actionable insight into operational performance and compliance, making it an ideal Key Performance Indicator (KPI) for patch management.

• ✗

  Mean time to detect vulnerabilities

  Why it's wrong here

  While Mean Time to Detect (MTTD) is a critical metric for vulnerability scanning and threat intelligence capabilities, it measures the discovery phase rather than the remediation phase. It does not reflect how effectively or quickly an organization applies patches once a vulnerability is identified.

• ✗

  Number of security incidents

  Why it's wrong here

  The total number of security incidents is a lagging outcome metric influenced by numerous external variables, such as threat actor activity and overall security posture. It lacks the specific operational focus required to evaluate the performance, speed, or thoroughness of the patch management program itself.

• ✗

  Number of vulnerabilities discovered

  Why it's wrong here

  This metric reflects the size of the attack surface and the thoroughness of vulnerability scanning tools rather than the performance of the patching process. A high number of discovered vulnerabilities does not indicate whether the patch management team is successfully remediating those flaws in a timely manner.

Go deeper

Related to this question