An organization is monitoring its cloud infrastructure to ensure security and compliance. It tracks the percentage of security patches applied within a given timeframe and the number of failed login attempts in a given period. Which of the following correctly identifies these metrics?