Questions

Answer the following questions to test your knowledge of this chapter:

1. What type of risk assessment would use likelihood and impact to produce a numerical risk rating?
   1. Qualitative assessment
   2. Gap assessment
   3. Quantitative risk assessment
   4. Impact assessment
2. What type of risk assessment would use metrics including asset value, monetary loss during an event, and a value that could be expected to be lost during the course of a year?
   1. Qualitative assessment
   2. Gap assessment
   3. Quantitative risk assessment
   4. Impact assessment
3. What is the metric that is used to calculate the loss during a single event?
   1. Efficiency factor (EF)
   2. ALE
   3. SLE
   4. ARO
4. If my database is worth $100,000 and a competitor steals 10% of the records during a breach of the network and this happens twice in a year, what is the SLE?
   1. $100,000
   2. $1,000
   3. $20,000
   4. $10,000
5. If my database is worth $100,000 and a competitor steals 10% of the records during a breach of the network and this happens twice in a year, what is the ALE?
   1. $200...