mediumMultiple Select
CS0-003 Practice Question: Which TWO methods help ensure the accuracy of…
Which TWO methods help ensure the accuracy of security metrics reported to management?
⚠ Common exam trap
CompTIA often tests the misconception that 'automated collection alone guarantees accuracy,' but the trap here is that automation without periodic validation can still propagate errors from misconfigured sources or data pipelines, so both B and C are required for accuracy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Periodic validation of data against original logs
Periodic validation of security metrics against original logs (e.g., firewall logs, IDS/IPS alerts, or authentication logs) ensures data integrity by detecting discrepancies introduced during aggregation or transformation. This practice aligns with the principle of 'trust but verify,' where raw log sources serve as the authoritative baseline for metric accuracy, preventing reporting of corrupted or incomplete data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Using colorful charts to impress stakeholders
Why it's wrong here
While data visualization tools and colorful charts can enhance readability and help communicate trends to non-technical stakeholders, they do not verify the underlying integrity of the data. Relying on aesthetics can mask underlying data quality issues, such as duplicate entries or skewed baselines, without contributing to actual metric accuracy.
- ✓
Periodic validation of data against original logs
Why this is correct
Regularly auditing and cross-referencing aggregated security metrics against raw, immutable source logs (such as SIEM or syslog data) ensures that data pipeline transformations have not introduced errors. This reconciliation process detects drift, corruption, or manipulation, thereby guaranteeing that the reported metrics accurately reflect the actual security posture.
- ✓
Automated data collection from reliable sources
Why this is correct
Utilizing automated APIs and scripts to gather metrics directly from trusted security controls (like EDR, firewalls, and vulnerability scanners) eliminates the risk of human error inherent in manual extraction. Automation ensures consistent, timely, and tamper-resistant data ingestion, which is fundamental to maintaining high-fidelity security metrics.
- ✗
Reporting only positive metrics to maintain confidence
Why it's wrong here
Selectively filtering metrics to present only favorable outcomes introduces confirmation bias and obscures critical vulnerabilities or operational failures. This practice compromises the integrity of security reporting, leading to a false sense of security and preventing leadership from making informed, risk-based resource allocation decisions.
- ✗
Manual entry of data from multiple spreadsheets
Why it's wrong here
Relying on manual transcription and consolidation of security data across disparate spreadsheets introduces significant opportunities for human error, such as typos, cut-and-paste mistakes, and version control issues. This highly inefficient process lacks auditability and frequently results in stale, inaccurate, or inconsistent metrics.
Go deeper
Related to this question
Learn chapter
Splunk SPL Queries for Security Analysts
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Metric
A metric is a quantifiable measurement used to assess the performance, health, or status of IT systems, networks, or applications.
About these practice questions
One of 701 original CS0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CS0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CS0-004 exam.