exam questions

Exam SY0-501 All Questions

View all questions & answers for the SY0-501 exam

Exam SY0-501 topic 1 question 475 discussion

Actual exam question from CompTIA's SY0-501
Question #: 475
Topic #: 1
[All SY0-501 Questions]

A Chief Information Officer (CIO) asks the company's security specialist if the company should spend any funds on malware protection for a specific server. Based on a risk assessment, the ARO value of a malware infection for a server is 5 and the annual cost for the malware protection is $2500.
Which of the following SLE values warrants a recommendation against purchasing the malware protection?

  • A. $500
  • B. $1000
  • C. $2000
  • D. $2500
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Lucky_Alex
Highly Voted 4 years, 10 months ago
SLE = ALE / ARO 2500 / 5 = 500 The answer is A
upvoted 9 times
...
fonka
Most Recent 3 years, 10 months ago
Single-loss expectancy (SLE) is the monetary value expected from the occurrence of a risk on an asset. It is related to risk management and risk assessment. Single-loss expectancy is mathematically expressed as: SLE = asset value x exposure factor If only half of a $1,000,000 asset is lost in an incident, then the exposure factor is 50 percent and the SLE is $500,000. It is possible for a loss to exceed the asset’s value to the corporation, such as in the event of a massive product liability lawsuit; in this case, the EF would be greater than 100 percent. 1/5 times 2500 or 0.02 * 2500= 500
upvoted 1 times
...
Azo_4952
4 years, 6 months ago
SLE=ALE/ARO. 2500/5 IS 500 as the right answer
upvoted 3 times
...
maxdamage
4 years, 7 months ago
You don't even have to do the math here. You know there is exactly ONE right answer so it should be lowest value that you expect to lose - that's when the cost of countermeasures stops making sense.
upvoted 2 times
...
bolota
4 years, 10 months ago
5X500=2500
upvoted 1 times
...
thebottle
5 years, 1 month ago
Answer should be A https://resources.infosecinstitute.com/quantitative-risk-analysis/#gref Annualized rate of occurrence (ARO) is described as an estimated frequency of the threat occurring in one year. ARO is used to calculate ALE (annualized loss expectancy). ALE is calculated as follows: SLE x ARO = ALE A)500(SLE)*5(ARO) = 2500 https://www.pearsonitcertification.com/articles/article.aspx?p=30287&seqNum=4 […] the annualized loss expectancy (ALE), […] tells the analyst the maximum amount that should be spent on the countermeasure to prevent the threat from occurring. B)1000(SLE)*5(ARO) = 5000 So now think , inverse, The questions says , when to give a “recommendation against purchasing” You should give a recommendation when countermeasures < ALE (CASE B;C;D) You should not give a recommendation when countermeasures (2500) => ALE (2500)
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago