Certified in Risk and Information Systems Control (CRISC) — Question 210

Which of the following BEST indicates the effectiveness of anti-malware software?

Answer options

• A. Number of staff hours lost due to malware attacks.
• B. Number of patches made to anti-malware software.
• C. Number of successful attacks by malicious software.
• D. Number of downtime hours in business-critical servers.

Correct answer: C

Explanation

The correct answer is C, as the number of successful attacks by malicious software directly reflects the effectiveness of the anti-malware software in preventing threats. The other options, while relevant to the impact of malware or the maintenance of software, do not directly indicate the performance or effectiveness of the anti-malware solutions themselves.