nerdexam
(ISC)2

SSCP · Question #1109

Vulnerability x Threat = RISK is an example of the _______________.

The correct answer is C. Risk Equation. The formula 'Vulnerability x Threat = RISK' represents the fundamental relationship between these elements in assessing potential harm, commonly known as the Risk Equation.

Submitted by femi9· Apr 18, 2026Risk Identification, Monitoring and Analysis

Question

Vulnerability x Threat = RISK is an example of the _______________.

Options

  • ADisaster Recovery Equation
  • BThreat Assessment
  • CRisk Equation
  • DCalculation of Annual Loss Expectancy

How the community answered

(14 responses)
  • C
    93% (13)
  • D
    7% (1)

Why each option

The formula 'Vulnerability x Threat = RISK' represents the fundamental relationship between these elements in assessing potential harm, commonly known as the Risk Equation.

ADisaster Recovery Equation

A Disaster Recovery Equation would typically involve metrics related to recovery time objectives (RTO) or recovery point objectives (RPO), not a direct multiplication of vulnerability and threat.

BThreat Assessment

Threat Assessment is a process of identifying and evaluating potential threats, not a mathematical equation itself.

CRisk EquationCorrect

The Risk Equation defines risk as the product of a vulnerability (a weakness in a system) and a threat (a potential danger that could exploit that weakness). This fundamental equation is used in risk management to quantify potential harm.

DCalculation of Annual Loss Expectancy

The Calculation of Annual Loss Expectancy (ALE) is a specific quantitative risk assessment metric, often derived from single loss expectancy (SLE) and annual rate of occurrence (ARO), and is distinct from the general risk equation.

Concept tested: Risk management fundamentals (Risk Equation)

Source: https://learn.microsoft.com/en-us/security/compass/incident-response-playbook-risk-assessment

Topics

#Risk Management#Risk Equation#Threat Assessment#Vulnerability

Community Discussion

No community discussion yet for this question.

Full SSCP Practice