Objective 7.1
Cybersecurity Defense ArchitectExplain how to define, measure, and report on metrics to assess and monitor a security program’s effectiveness
Objective 7.1 sits in Measuring and Improving Security Program Effectiveness, which carries 15% of the Cybersecurity Defense Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A program review reports that patching is improving, with no figures attached. What counts as a measure under SP 800-55?
Correct.
Checked against nvlpubs.nist.gov, August 2026Concept
Insisting on numbers is what makes a program comparable with itself over time. An opinion cannot be tracked, only repeated.
Why C
NIST documents that measures are numerically expressed data that are gathered through the process of measurement.
Source
NIST SP 800-55 Volume 1: Measurement Guide for Information Security, checked August 2026Measures are numerically expressed data that are gathered through the process of measurement.
Now you: objective 7.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
You are drafting measures for a security program and each statement must open with a numeric term. Which set of opening words does SP 800-55 give?
Sample question 2 of 3
A team lead defines a target for a measure. What does NIST document a target to be?
Sample question 3 of 3
A report tallies how many systems carry up-to-date patches, as evidence that specific controls are progressing. Which NIST measure type is that?
Full Cybersecurity Defense Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.