nerdexam
EC-Council

312-50V10 · Question #478

What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS…

The correct answer is D. $146. This question requires calculating SLE, then applying an assumed ARO of 1/3 (once every three years for hard drives) to derive the ALE.

Information Security and Ethical Hacking Fundamentals

Question

What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

Options

  • A$440
  • B$100
  • C$1320
  • D$146

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    25% (5)
  • D
    60% (12)

Why each option

This question requires calculating SLE, then applying an assumed ARO of 1/3 (once every three years for hard drives) to derive the ALE.

A$440

This value of $440 equals the raw SLE (asset plus labor cost) and ignores the ARO adjustment needed to produce an annualized figure.

B$100

This value of $100 corresponds only to the labor cost (10 hours x $10) without including the drive replacement cost or the ARO.

C$1320

This value of $1320 is not derivable from the given figures using standard SLE/ARO/ALE formulas.

D$146Correct

SLE equals asset value times EF: $300 x 1 = $300 for the drive, plus recovery labor of 14 hours x $10 = $140, giving SLE = $440. Hard drives are commonly assumed to fail roughly once every three years (ARO = 1/3), so ALE = $440 x (1/3) = approximately $146. This figure represents the annualized cost accounting for the realistic frequency of failure.

Concept tested: Risk quantification using SLE, ARO, and ALE formulas

Source: https://learn.microsoft.com/en-us/security/adoption/secure-methodology

Topics

#SLE#ALE#ARO#quantitative risk analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice