nerdexam
(ISC)2

CSSLP · Question #196

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

The correct answer is B. Annualized Rate of Occurrence (ARO). Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.

Secure Software Concepts

Question

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Options

  • ASingle Loss Expectancy (SLE)
  • BAnnualized Rate of Occurrence (ARO)
  • CSafeguard
  • DExposure Factor (EF)

How the community answered

(18 responses)
  • B
    94% (17)
  • D
    6% (1)

Why each option

Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.

ASingle Loss Expectancy (SLE)

Single Loss Expectancy (SLE) represents the monetary loss expected each time a specific threat materializes, not the frequency of its occurrence.

BAnnualized Rate of Occurrence (ARO)Correct

Annualized Rate of Occurrence (ARO) specifically defines the estimated frequency, expressed as a decimal, that a particular risk event or threat is expected to occur within a one-year period.

CSafeguard

A safeguard, also known as a control, is a protective measure implemented to reduce risk, not a metric representing the frequency of a threat.

DExposure Factor (EF)

Exposure Factor (EF) is a percentage representing the amount of an asset that is likely to be damaged or lost if a threat materializes, not the frequency of the threat itself.

Concept tested: Quantitative risk management - ARO

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Risk Management#Quantitative Risk Analysis#Annualized Rate of Occurrence (ARO)#Threat Frequency

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice