Question 1

What is the formula used to calculate Annual Loss Expectancy (ALE)?

Accepted Answer

ALE = Single Loss Expectancy (SLE) × Annualized Rate of Occurrence (ARO). It represents the expected yearly financial loss from a specific threat.

Question 2

What is the difference between a threat and a vulnerability in risk management?

Accepted Answer

A threat is any potential danger that can exploit a weakness, while a vulnerability is a weakness or gap in a system that can be exploited. A threat agent acts on a threat to exploit a vulnerability.

Question 3

What are the four primary risk response strategies?

Accepted Answer

The four strategies are: Risk Avoidance (eliminate the risk), Risk Transfer (shift risk to a third party), Risk Mitigation (reduce the likelihood or impact), and Risk Acceptance (acknowledge and accept the risk).

Question 4

What does Single Loss Expectancy (SLE) represent and how is it calculated?

Accepted Answer

SLE represents the monetary loss expected from a single occurrence of a specific threat. It is calculated as: SLE = Asset Value (AV) × Exposure Factor (EF).

Question 5

What is residual risk?

Accepted Answer

Residual risk is the risk that remains after security controls have been applied to mitigate the total risk. It equals Total Risk minus the risk reduced by controls.

CISSP Security & Risk Management

Also Included in the Study Bundle

Practice Tests

Study Guides

Match Game

Try These Cards

Want to keep studying?

Related Study Decks

CISSP Asset Security

Ready for the full exam?