nerdexam
(ISC)2(ISC)2

CSSLP · Question #245

CSSLP Question #245: Real Exam Question with Answer & Explanation

The correct answer is A: SLE = Asset Value (AV) * Exposure Factor (EF). Single Loss Expectancy (SLE) quantifies the financial loss expected from a single occurrence of a specific threat.

Secure Software Concepts

Question

Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the following formulas best describes the Single Loss Expectancy (SLE)?

Options

  • ASLE = Asset Value (AV) * Exposure Factor (EF)
  • BSLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
  • CSLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
  • DSLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)

Explanation

Single Loss Expectancy (SLE) quantifies the financial loss expected from a single occurrence of a specific threat.

Common mistakes.

  • B. This formula incorrectly combines ALE and ARO; ALE (Annualized Loss Expectancy) itself is derived from SLE and ARO.
  • C. This formula incorrectly combines ALE and EF; ALE is a measure of annual loss, not a factor in single event loss calculation.
  • D. This formula incorrectly combines Asset Value with ARO; ARO (Annualized Rate of Occurrence) measures how often a threat is expected to occur annually, not the loss from a single event.

Concept tested. Risk assessment calculation - Single Loss Expectancy

Reference. https://csrc.nist.gov/glossary/term/single_loss_expectancy

Topics

#Single Loss Expectancy#Risk Management Formulas#Asset Value#Exposure Factor

Community Discussion

No community discussion yet for this question.

Full CSSLP PracticeBrowse All CSSLP Questions