1.0 Security and Risk Management
Risk Management Practice Questions
Quantitative and qualitative risk analysis, risk treatment, threat modeling, supply chain risk, and BCP/BIA.
One solved question, so you can see how these are marked
A database has an asset value of $240,000. A fire would destroy 35 percent of it, and the fire is expected once every 20 years. What is the annualized loss expectancy for this threat?
$4,200
The single loss expectancy is asset value multiplied by exposure factor, or $240,000 x 0.35 = $84,000. Multiplying SLE by the annualized rate of occurrence, 1/20, gives an ALE of $4,200, so the other figures omit or misapply a factor.
Every question in the set below is marked like this. The answers stay hidden until you pick one.