Exam 350-201 topic 1 question 62 discussion

ChatGPT: To calculate risk, the analyst needs to determine the impact (severity) of the event and the probability (likelihood) of it occurring. This helps quantify the potential risk to the organization.

I would go with B!

risk model framework is overall task. For adding one system, likelyhood.

D -to calculate the risk, a risk model framework is needed. - ChatGPT

B. Event severity and likelihood A risk assessment of the asset should include an evaluation of the event severity and likelihood. Event severity refers to the level of harm or damage that an event or incident can cause, and likelihood refers to the probability of a specific threat exploiting a specific vulnerability. By considering both of these factors, the risk assessment will provide a more complete understanding of the potential consequences of a successful attack on the web server and the likelihood that it will occur. A. assessment scope, C. incident response playbook, and D. risk model framework are important element but it's more related to the risk assessment process rather than the specific calculation of risk.

According to NIST https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-30r1.pdf on page 32 To conduct an assessment the following steps are required: 1) Identify threat sources and events 2) Identify vulnerabilities and predisposing conditions 3) Determine likelihood of occurrence 4) Determine magnitude of impact 5) Determine risk Answer: B