Examkin

Soru

Zorluk: Çok zorResolving Paradoxes and Apparent Discrepancies

Following a major revision to its regulatory standards, an international financial oversight agency began conducting unannounced cybersecurity audits of commercial banks. To avoid severe regulatory fines for non-compliance, virtually all audited banks substantially increased their annual expenditure on advanced threat-detection software and external consulting over the subsequent two years. Surprisingly, data collected at the end of this two-year period revealed that the average financial loss per successful cyberattack at these audited banks increased by over 40 percent, whereas the average loss per successful cyberattack at unaudited financial institutions remained completely unchanged. Which of the following, if true, most helps to account for the apparent discrepancy described above?

  1. A
    The financial penalties imposed by the oversight agency for failing an audit are significantly higher than the average cost of remediating a standard cyberattack.
  2. B
    Unaudited financial institutions generally process a smaller total volume of high-value electronic fund transfers than audited commercial banks do.
  3. The advanced threat-detection software installed by audited banks successfully intercepts virtually all low-level, low-impact intrusions, leaving only highly sophisticated, catastrophic breaches among the attacks that manage to succeed.Cevap
  4. D
    Audited commercial banks that increased spending on threat-detection software simultaneously reduced their budget allocations for physical security at retail branch locations.
  5. E
    Cybercriminals targeted audited banks far more frequently than unaudited institutions because audited banks publicly disclosed their compliance upgrades.

Cevap

The apparent discrepancy is best explained by the fact that advanced threat-detection software intercepts routine, low-impact intrusions, ensuring that only highly sophisticated breaches succeed, thereby raising the average financial loss per successful attack.
The correct answer provides a statistical selection mechanism that reconciles both premises. When audited banks install advanced threat-detection software, they successfully block routine, minor attacks before any damage occurs. Consequently, the only attacks that manage to penetrate the bank's defenses are exceptionally sophisticated, high-impact breaches. Removing minor losses from the pool of 'successful cyberattacks' shifts the composition of that pool upward, raising the average loss per successful attack even though total overall damage across all attempted attacks may have declined.

Adım Adım Çözüm

1
Identify the two seemingly contradictory facts presented in the stimulus.
Fact 1: Audited banks significantly increased spending on advanced threat-detection software. Fact 2: The average financial loss per successful cyberattack at audited banks increased by 40%, whereas it remained unchanged at unaudited banks.
Resolving a paradox requires finding a missing factor that allows both premise facts to be true simultaneously.
2
Analyze the mathematical composition of the metric 'average loss per successful attack'.
The metric is calculated as (Total Financial Losses from Successful Attacks) / (Total Number of Successful Attacks).
Understanding how the ratio is structured helps identify how filtering out minor attacks alters the average without indicating a failure of the security measures.
3
Evaluate the impact of filtering out low-level attacks.
If threat-detection software prevents low-severity attacks from succeeding, those low-dollar losses are removed from the numerator and denominator of the 'successful attacks' calculation. The remaining successful attacks consist exclusively of complex, high-dollar breaches, raising the calculated average.
This explains why security spending worked as intended while simultaneously causing the observed statistical increase in loss per breach.

Anahtar Kavram

Resolving Rate vs. Composition Paradoxes (Denominator and Selection Effects)
Bu soruyu puanla

Konular

Resolving Paradoxes and Apparent Discrepancies

Bu konudan daha fazla soru