SPLK-5002 · Question #76
When developing security metrics, why would a Key Performance Indicator (KPI) that focuses on total perimeter firewall blocks be an ineffective metric?
The correct answer is B. Perimeter firewalls are exposed on the internet directly and thus subject to automated scanners. A KPI based on total perimeter firewall blocks is ineffective because perimeter firewalls are constantly exposed to the internet and subject to automated scans and attack tools, which can generate very high block counts. This inflates the metric with noise, making it a poor…
Question
When developing security metrics, why would a Key Performance Indicator (KPI) that focuses on total perimeter firewall blocks be an ineffective metric?
Options
- AThis a Key Result Indicator, not a KPI. It is a metric that is measuring the results of the perimeter
- BPerimeter firewalls are exposed on the internet directly and thus subject to automated scanners
- CThe metric is too high level, it should be broken down by the type of block. For example, blocks of
- DPerimeter firewalls should be measured on both the number of connections that they permit as
How the community answered
(42 responses)- A14% (6)
- B74% (31)
- C7% (3)
- D5% (2)
Explanation
A KPI based on total perimeter firewall blocks is ineffective because perimeter firewalls are constantly exposed to the internet and subject to automated scans and attack tools, which can generate very high block counts. This inflates the metric with noise, making it a poor indicator of actual security performance or risk reduction.
Topics
Community Discussion
No community discussion yet for this question.