Computer Security Applicationsintermediate
An organization estimates the cost of one loss event and how often it may occur in a year. Which calculation produces an annualized loss estimate?
Answer
Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) × Annual Rate of Occurrence (ARO)
Explanation
### Why this is right
The course formula multiplies estimated loss per event by the expected annual occurrence rate. The result is an annualized loss estimate.
### The concept
Single Loss Expectancy describes one occurrence, while Annual Rate of Occurrence describes expected frequency per year. Multiplication combines these quantities into Annualized Loss Expectancy. Addition, subtraction, or reversing the ratio does not apply the stated relationship.
### The other options
- **B. Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) + Annual Rate of Occurrence (ARO)**: adding the values does not estimate repeated annual loss.
- **C. Annualized Loss Expectancy (ALE) = Annual Rate of Occurrence (ARO) ÷ Single Loss Expectancy (SLE)**: this reverses the relationship and does not produce expected loss.
- **D. Annualized Loss Expectancy (ALE) = Single Loss Expectancy (SLE) − Annual Rate of Occurrence (ARO)**: subtraction is not the stated formula.
### Terms
- **ALE**: Annualized Loss Expectancy.
- **SLE**: Single Loss Expectancy.
- **ARO**: Annual Rate of Occurrence.
### Remember
For the course’s annual loss estimate, multiply SLE by ARO.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free