nerdexam
(ISC)2(ISC)2

CSSLP · Question #196

CSSLP Question #196: Real Exam Question with Answer & Explanation

The correct answer is B: Annualized Rate of Occurrence (ARO). Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.

Secure Software Concepts

Question

Which of the following terms related to risk management represents the estimated frequency at which a threat is expected to occur?

Options

  • ASingle Loss Expectancy (SLE)
  • BAnnualized Rate of Occurrence (ARO)
  • CSafeguard
  • DExposure Factor (EF)

Explanation

Annualized Rate of Occurrence (ARO) is a key quantitative risk management metric that quantifies the expected frequency of a specific threat occurring within a single year. It helps in calculating the overall financial impact of risks.

Common mistakes.

  • A. Single Loss Expectancy (SLE) represents the monetary loss expected each time a specific threat materializes, not the frequency of its occurrence.
  • C. A safeguard, also known as a control, is a protective measure implemented to reduce risk, not a metric representing the frequency of a threat.
  • D. Exposure Factor (EF) is a percentage representing the amount of an asset that is likely to be damaged or lost if a threat materializes, not the frequency of the threat itself.

Concept tested. Quantitative risk management - ARO

Reference. https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf

Topics

#Risk Management#Quantitative Risk Analysis#Annualized Rate of Occurrence (ARO)#Threat Frequency

Community Discussion

No community discussion yet for this question.

Full CSSLP PracticeBrowse All CSSLP Questions