nerdexam
CompTIA

SY0-301 · Question #644

Which of the following would BEST be used to calculate the expected loss of an event, if the likelihood of an event occurring is known? (Select TWO).

The correct answer is B. ALE C. SLE. Quantitative risk analysis uses two complementary metrics to express expected loss. SLE (Single Loss Expectancy, C) is the monetary value lost from a single occurrence of the threat event: SLE = Asset Value × Exposure Factor. ALE (Annualized Loss Expectancy, B) combines SLE…

Security program management and oversight

Question

Which of the following would BEST be used to calculate the expected loss of an event, if the likelihood of an event occurring is known? (Select TWO).

Options

  • ADAC
  • BALE
  • CSLE
  • DARO
  • EROI

How the community answered

(44 responses)
  • A
    2% (1)
  • B
    91% (40)
  • D
    2% (1)
  • E
    5% (2)

Explanation

Quantitative risk analysis uses two complementary metrics to express expected loss. SLE (Single Loss Expectancy, C) is the monetary value lost from a single occurrence of the threat event: SLE = Asset Value × Exposure Factor. ALE (Annualized Loss Expectancy, B) combines SLE with how often the event is expected to occur per year: ALE = SLE × ARO. The question specifies that likelihood (ARO - Annualized Rate of Occurrence) is already known; plugging ARO into the formula with SLE yields ALE, so both B and C are the computational components of expected loss. DAC (A) is a Discretionary Access Control model, not a risk metric. ARO (D) is the likelihood input itself, not an output that expresses loss. ROI (E) measures return on investment and is not a direct loss-calculation metric.

Topics

#ALE#SLE#ARO#risk quantification

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice