nerdexam
EC-Council

312-50V11 · Question #478

What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and

The correct answer is D. $146. This question requires computing SLE from the total asset and recovery cost, then applying an implied ARO of 1/3 to derive the ALE of approximately $146 per year.

Information Security and Ethical Hacking Fundamentals

Question

What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

Options

  • A$440
  • B$100
  • C$1320
  • D$146

How the community answered

(41 responses)
  • A
    17% (7)
  • B
    5% (2)
  • C
    10% (4)
  • D
    68% (28)

Why each option

This question requires computing SLE from the total asset and recovery cost, then applying an implied ARO of 1/3 to derive the ALE of approximately $146 per year.

A$440

$440 represents the SLE (Single Loss Expectancy) - the total cost for a single incident - and does not account for how frequently the loss event occurs annually, so it is not the ALE.

B$100

$100 does not result from any standard SLE, ARO, or ALE formula applied to the given values of $300, $10/hr, 14 hours, and EF = 1.

C$1320

$1320 equals SLE x ARO of 3, which would imply the hard drive fails three times per year - an unrealistic frequency that is not supported by the scenario.

D$146Correct

SLE is calculated as (asset value + recovery labor) x EF = ($300 hard drive + (10 + 4 hours x $10/hr)) x 1.0 = $440. Applying an implied ARO of 1/3 (one failure per three years, a standard assumption for hard drive MTBF in this exam scenario), ALE = $440 x 0.333 = approximately $147, making $146 the closest correct answer.

Concept tested: SLE, ARO, and ALE quantitative risk calculation

Source: https://csrc.nist.gov/publications/detail/sp/800-30/rev-1/final

Topics

#SLE#ARO#ALE#risk quantification

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice