Examkin

Soru

Zorluk: OrtaRisk Identification, Assessment, and Response Strategies

A logistics company is conducting a quantitative risk assessment for its primary fleet telemetry server. The server has an estimated Asset Value (AVAV) of 600,000.ThreatintelligencedataindicatesanAnnualRateofOccurrence(600,000. Threat intelligence data indicates an Annual Rate of Occurrence ( ARO )of0.20foramajordatacorruptionincident.IftheorganizationcalculatestheAnnualLossExpectancy() of 0.20 for a major data corruption incident. If the organization calculates the Annual Loss Expectancy ( ALE )tobe) to be 90,000, what is the Exposure Factor (EFEF) for this security risk?

  1. 0.75Cevap
  2. B
    0.15
  3. C
    0.30
  4. D
    0.45

Cevap

The Exposure Factor (EFEF) associated with this risk is 0.75 (75%).
The correct response demonstrates proper quantitative risk analysis by deriving the Exposure Factor (EFEF) through two standard steps: calculating SLE=ALEARO=$90,0000.20=$450,000SLE = \frac{ALE}{ARO} = \frac{\$90,000}{0.20} = \$450,000, and then calculating EF=SLEAV=$450,000$600,000=0.75EF = \frac{SLE}{AV} = \frac{\$450,000}{\$600,000} = 0.75 (or 75%).

Adım Adım Çözüm

1
Calculate Single Loss Expectancy (SLE)
SLE=ALEARO=$90,0000.20=$450,000SLE = \frac{ALE}{ARO} = \frac{\$90,000}{0.20} = \$450,000
Annual Loss Expectancy is defined as ALE=SLE×AROALE = SLE \times ARO. Rearranging terms yields SLE=ALEAROSLE = \frac{ALE}{ARO}.
2
Calculate Exposure Factor (EF)
EF=SLEAV=$450,000$600,000=0.75EF = \frac{SLE}{AV} = \frac{\$450,000}{\$600,000} = 0.75
Single Loss Expectancy is defined as SLE=AV×EFSLE = AV \times EF. Rearranging terms yields EF=SLEAVEF = \frac{SLE}{AV}.

Anahtar Kavram

Quantitative Risk Assessment Variables (ALE=SLE×AROALE = SLE \times ARO and SLE=AV×EFSLE = AV \times EF)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Risk Identification, Assessment, and Response Strategies

Bu konudan daha fazla soru