nerdexam
CompTIA

CAS-003 · Question #423

A security technician receives a copy of a report that was originally sent to the board of directors by the Chief Information Security Officer (CISO). The report outlines the following KPVKRI data…

The correct answer is A. 1. AV coverage across the fleet improved. KPI/KRI trend data showing increasing AV agent coverage alongside decreasing infection rates indicates that AV deployment across the fleet has improved over the 12-month period.

Enterprise Security Operations

Question

A security technician receives a copy of a report that was originally sent to the board of directors by the Chief Information Security Officer (CISO). The report outlines the following KPVKRI data for the last 12 months:

Which of the following BEST describes what could be interpreted from the above data?

Exhibit

CAS-003 question #423 exhibit

Options

  • A
    1. AV coverage across the fleet improved
  • B
    1. AV signature coverage has remained consistently high
  • C
    1. There is no correlation between infected systems and AV coverage
  • D
    1. AV coverage across the fleet declined

How the community answered

(18 responses)
  • A
    61% (11)
  • B
    11% (2)
  • C
    6% (1)
  • D
    22% (4)

Why each option

KPI/KRI trend data showing increasing AV agent coverage alongside decreasing infection rates indicates that AV deployment across the fleet has improved over the 12-month period.

A1. AV coverage across the fleet improvedCorrect

When 12-month KPI data shows a rising percentage of endpoints with active AV coverage correlated with a declining number of infected systems, the most defensible interpretation is that fleet-wide AV coverage improved over time. The upward coverage trend is a direct indicator of expanded AV deployment, and the corresponding reduction in infections supports the conclusion that the improvement had a measurable protective effect.

B1. AV signature coverage has remained consistently high

Describing coverage as consistently high implies a flat, unchanging metric, which contradicts a 12-month dataset showing an upward trend in coverage percentages.

C1. There is no correlation between infected systems and AV coverage

Claiming no correlation between infected systems and AV coverage ignores the standard security principle that increased AV coverage reduces infection rates, a relationship typically visible in such KRI data.

D1. AV coverage across the fleet declined

Interpreting the data as declining coverage would reflect a negative trend, which is inconsistent with data demonstrating progressive improvement in AV deployment metrics over the reporting period.

Concept tested: KPI and KRI trend interpretation for AV coverage

Source: https://www.comptia.org/content/guides/comptia-security-study-guide

Topics

#KPI#KRI#security metrics#AV coverage analysis

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice