Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The number of false positives (C) is indeed an important metric for evaluating the performance of an anti-virus program. A low number of false positives is generally desired, as it means legitimate activities are not being incorrectly flagged as malicious, which can be disruptive and require unnecessary follow-up. However, the **percentage of IT assets with current malware definitions** (D) is often considered a more direct measure of an anti-virus program's effectiveness because it indicates the readiness of the anti-virus software to detect and protect against the latest threats across all IT assets. If this KPI is high, it suggests that the anti-virus program is being maintained properly and is capable of providing the most up-to-date protection, which is critical for its overall effectiveness. While both are valid KPIs, the context of the question seems to prioritize ensuring comprehensive, up-to-date protection, which is why option D would be the best choice in this scenario.
Low number of false positives should indicate the effectiveness of an anti-virus.
C. Percentage of IT assets with current malware definitions. The best key performance indicator (KPI) to measure the effectiveness of an anti-virus program is "C. Percentage of IT assets with current malware definitions." This KPI reflects the extent to which the anti-virus program is up-to-date across the organization's IT assets. Keeping malware definitions current is essential for the anti-virus program to detect and mitigate new threats effectively. While the other options (frequency of anti-virus software updates, number of alerts generated by the anti-virus software, number of false positives detected) are relevant measures, the percentage of IT assets with current malware definitions directly assesses the readiness and coverage of the anti-virus program in preventing malware infections.