Which KPI measures the time from threat detection to remediation?

• A. Mean Time To Detect
• B. False Positive Rate
• C. Mean Time To Resolve
• D. Mean Time To Respond

Answer: (C)

This item tests how you track the duration of the entire incident lifecycle from detection to complete remediation. Mean Time To Resolve is the measure that captures how long it takes to move from the moment a threat is detected to when the threat is fully remediated, including containment, eradication, and recovery. It reflects the efficiency of the incident response and how quickly the team can close out incidents.

The other metrics focus on different stages or aspects: Mean Time To Detect looks at how quickly threats are discovered after they occur, not how long it takes to fix them; False Positive Rate is a quality metric about alert accuracy, not time; Mean Time To Respond tracks the time to take initial response actions after detection, not the total remediation time.