ISC2 ISSMP Exam - Topic 3 Question 49 Discussion

Actual exam question for ISC2's ISSMP exam

Question #: 49
Topic #: 3

[All ISSMP Questions]

How can you calculate the Annualized Loss Expectancy (ALE) that may occur due to a threat?

ASingle Loss Expectancy (SLE)/ Exposure Factor (EF)

BAsset Value X Exposure Factor (EF)

CExposure Factor (EF)/Single Loss Expectancy (SLE)

DSingle Loss Expectancy (SLE) X Annualized Rate of Occurrence (ARO)

Show Suggested Answer

Suggested Answer: D

The Annualized Loss Expectancy (ALE) that occurs due to a threat can be calculated by multiplying the Single Loss Expectancy (SLE) with the Annualized Rate of Occurrence (ARO).

Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) X Annualized Rate of Occurrence (ARO)

Annualized Rate of Occurrence (ARO) is a number that represents the estimated frequency in which a threat is expected to occur. It is calculated based upon the probability of the event occurring and the number of employees that could make that event occur.

Single Loss Expectancy (SLE) is the value in dollars that is assigned to a single event. SLE can be calculated by the following formula.

SLE = Asset Value ($) X Exposure Factor (EF)

The Exposure Factor (EF) represents the % of assets loss caused by a threat. The EF is required to calculate Single Loss Expectancy (SLE).

by Quentin at May 06, 2022, 11:58 PM

Limited Time Offer

25%

Off

Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Krissy

4 months ago

I disagree, I think B has its merits too.

upvoted 0 times

...

Jade

4 months ago

No way, it’s not A or C. D is the correct formula!

upvoted 0 times

...

Georgiann

4 months ago

Wait, is it really that simple? I’m surprised!

upvoted 0 times

...

Vivienne

4 months ago

I thought it was B at first, but D makes more sense.

upvoted 0 times

...

Kimi

5 months ago

It's definitely D! SLE x ARO is the way to go.

upvoted 0 times

...

Dion

5 months ago

I thought ALE was just the Asset Value times the Exposure Factor, but that doesn't seem to match any of these options.

upvoted 0 times

...

Virgina

5 months ago

I feel like I confused the terms in the study materials. Is the Exposure Factor used in calculating SLE or ALE?

upvoted 0 times

...

Francisca

5 months ago

I think ALE is calculated using the Single Loss Expectancy, but I'm not sure if it's multiplied or divided by something.

upvoted 0 times

...

Eliz

5 months ago

I remember practicing a question where we had to find ALE, and I think it involved the Annualized Rate of Occurrence. Maybe it's option D?

upvoted 0 times

...

Buddy

5 months ago

Wait, what's this "independency" option? I don't recall that being a core data security principle. I'll have to double-check my notes, but I'm leaning towards just going with the CIA triad for this one.

upvoted 0 times

...

Valda

5 months ago

I'm a little confused by this question. All of these options seem like they could be considered fair processing practices. I'll need to re-read the question and really think about the transparency principle to figure this out.

upvoted 0 times

...

Jutta

5 months ago

This looks like a tricky one. I'll need to carefully examine the command output and the answer choices to determine which two statements are true.

upvoted 0 times

...

Laurene

5 months ago

I'm not sure about option C though. I remember we talked about real-time analytics, but I can't recall if DTS is used specifically for that.

upvoted 0 times

...