Exam SY0-501 topic 1 question 125 discussion

Actual exam question from CompTIA's SY0-501

Question #: 125
Topic #: 1

A security analyst is performing a quantitative risk analysis. The risk analysis should show the potential monetary loss each time a threat or event occurs. Given this requirement, which of the following concepts would assist the analyst in determining this value? (Choose two.)

A. ALE
B. AV
C. ARO
D. EF
E. ROI

Show Suggested Answer

Suggested Answer: BD 🗳️

by blurb at May 12, 2021, 9:15 p.m.

Comments

Submit Cancel

fonka

Highly Voted 4 years, 2 months ago

It is simple 1)SLE=AV(asset value) x EF(exposure Factor) This just to see how much cost a company incur from at anytime an incident happens. 2)ALE= SLE X ROI meaning what will be the annual cost which is sinlge loss of an event times rate of occurrence (how frequently the incident occur in a given time) So the question is asking what is sinlge loss of an event that is SLE= AV x EF

upvoted 5 times

Figekioki

4 years, 1 month ago

ALE is SLE x ARO, not ROI. Annual rate of occurrence, not return of investment.

upvoted 3 times

Dion79

4 years, 1 month ago

I hate this exam.

upvoted 5 times

...

MohammadQ

4 years ago

Im taking the exam Saturday and im screwed

upvoted 4 times

...

boydmwanza

Most Recent 4 years ago

wrong. correct a and c

upvoted 1 times

...

Dion79

4 years, 2 months ago

I'll go with provided answer. Quantitative risk assessment aims to assign concrete values to each risk factor. Single Loss Expectancy (SLE)—The amount that would be lost in a single occurrence of the risk factor. This is determined by multiplying the value of the asset by an Exposure Factor (EF). EF is the percentage of the asset value that would be lost. Annual Loss Expectancy (ALE)—The amount that would be lost over the course of a year. This is determined by multiplying the SLE by the Annual Rate of Occurrence (ARO). Thank fonka....

upvoted 3 times

...