Best method to present quarterly incident reports to the board of directors
A newly appointed board member with cybersecurity knowledge wants the board of directors to receive a quarterly report detailing the number of incidents that impacted the organization. The systems administrator is creating a way to present the data to the board of directors. Which of the following should the systems administrator use?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the ability to select appropriate reporting tools for executive audiences, avoiding the trap of choosing technical data sources like packet captures or vulnerability scans which are too granular for high-level reporting.
To effectively communicate security metrics to executive leadership, a systems administrator should use a dashboard. The community agrees that dashboards provide the necessary high-level visual summary of incident data that non-technical stakeholders require.
Selecting "Packet captures" is a common mistake because it is a raw data source used for deep troubleshooting, whereas the question asks for a presentation format.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
A dashboard is the correct choice because it aggregates data into a visual, easy-to-understand format suitable for executive summaries. Board members require high-level Key Performance Indicators (KPIs) and trends rather than raw technical data. As noted in the comments, dashboards offer a "clear and intuitive way to present complex data" and can be customized to highlight specific metrics like the number of incidents over a quarter.Why the Other Options Are Wrong
Packet captures (Option A) consist of raw network traffic data used for deep technical troubleshooting, which is far too detailed and irrelevant for a board report. Vulnerability scans (Option B) are specific assessments of system weaknesses, not a method for presenting incident statistics. Metadata (Option C) refers to data about other data and lacks the visual structure or summary capabilities needed for a presentation.Community Comment Notes
Community members emphasized that board members likely have "little knowledge" of technical details and need something "easy to look at." One user noted that for a "Director presentation," you should think of tools like PowerPoint or Excel, which aligns with the visual nature of a dashboard. The consensus strongly supports the dashboard for providing "at-a-glance views" and "actionable insights."Official Reference
- NIST SP 800-53 Rev 5 (SI-4 System Monitoring)
- https://csrc.nist.gov/pubs/sp/800/53/rev/5/final
Exam Strategy
When answering questions about reporting to executives or non-technical stakeholders, always look for options that summarize data visually or provide high-level overviews. Eliminate technical terms like "packets," "logs," or "scans" immediately, as these are meant for technical analysis, not business reporting.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →