ISC2 Governance, Risk and Compliance (CGRC) Practice Question
You are drafting the implementation plan for a new mandatory multi-factor authentication (MFA) control on all administrative logins. Senior management asks how you will verify the control achieves its intended security objective. Which metric best demonstrates the control's ongoing effectiveness?
Percentage of privileged authentication events successfully validated through MFA
Total number of help-desk tickets opened for password resets each quarter
Average time required to deploy the MFA application to user devices
Count of operating system patches applied within required timeframes
Effectiveness metrics must directly measure whether the control is fulfilling its security purpose-in this case, preventing single-factor logins to privileged accounts. Tracking the percentage of privileged authentication events that are successfully validated through MFA shows how often the control is actually enforced in daily operations. Deployment speed, help-desk volumes, or patch counts may be useful project or operational metrics, but they do not measure whether the MFA control is achieving its core security objective of requiring an additional authentication factor for privileged access.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Multi-Factor Authentication (MFA)?
Open an interactive chat with Bash
Why is tracking privileged authentication events validated through MFA an effective metric?
Open an interactive chat with Bash
What are privileged accounts and why do they require stricter controls?
Open an interactive chat with Bash
ISC2 Governance, Risk and Compliance (CGRC)
Implementation of Security and Privacy Controls
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .