nerdexam
(ISC)2

CSSLP · Question #245

Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the following formulas best describes the Single Loss Expectancy (SLE)?

The correct answer is A. SLE = Asset Value (AV) * Exposure Factor (EF). Single Loss Expectancy (SLE) quantifies the financial loss expected from a single occurrence of a specific threat.

Secure Software Concepts

Question

Single Loss Expectancy (SLE) represents an organization's loss from a single threat. Which of the following formulas best describes the Single Loss Expectancy (SLE)?

Options

  • ASLE = Asset Value (AV) * Exposure Factor (EF)
  • BSLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)
  • CSLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)
  • DSLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)

How the community answered

(19 responses)
  • A
    89% (17)
  • C
    5% (1)
  • D
    5% (1)

Why each option

Single Loss Expectancy (SLE) quantifies the financial loss expected from a single occurrence of a specific threat.

ASLE = Asset Value (AV) * Exposure Factor (EF)Correct

The formula SLE = Asset Value (AV) * Exposure Factor (EF) accurately calculates the potential financial loss from a single security incident. Asset Value represents the monetary worth of the asset, while Exposure Factor is the percentage of loss that would occur to the asset if a specific threat materializes.

BSLE = Annualized Loss Expectancy (ALE) * Annualized Rate of Occurrence (ARO)

This formula incorrectly combines ALE and ARO; ALE (Annualized Loss Expectancy) itself is derived from SLE and ARO.

CSLE = Annualized Loss Expectancy (ALE) * Exposure Factor (EF)

This formula incorrectly combines ALE and EF; ALE is a measure of annual loss, not a factor in single event loss calculation.

DSLE = Asset Value (AV) * Annualized Rate of Occurrence (ARO)

This formula incorrectly combines Asset Value with ARO; ARO (Annualized Rate of Occurrence) measures how often a threat is expected to occur annually, not the loss from a single event.

Concept tested: Risk assessment calculation - Single Loss Expectancy

Source: https://csrc.nist.gov/glossary/term/single_loss_expectancy

Topics

#Single Loss Expectancy#Risk Management Formulas#Asset Value#Exposure Factor

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice