Secure Software Lifecycle Professional – CSSLP – Question191
Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur? A. Single Loss Expectancy (SLE) B. Annualized Rate of Occurrence (ARO) C. Safeguard D. Exposure Factor (EF)
Correct Answer: B
Explanation:
Explanation: The Annualized Rate of Occurrence (ARO) is a number that represents the estimated frequency at which a threat is expected to occur. It is calculated based upon the probability of the event occurring and the number of employees that could make that event occur. Answer: D is incorrect. The Exposure Factor (EF) represents the % of assets loss caused by a threat. The EF is required to calculate the Single Loss Expectancy (SLE). Answer: A is incorrect. The Single Loss Expectancy (SLE) is the value in dollars that is assigned to a single event. SLE = Asset Value ($) X Exposure Factor (EF) Answer: C is incorrect. Safeguard acts as a countermeasure for reducing the risk associated with a specific threat or a group of threats.
Please disable your adblocker or whitelist this site!