CASP+ CompTIA Advanced Security Practitioner Study Guide, 4th Edition

AppendixAnswers to Review Questions

Chapter 1: Risk Management

1. C. Subjective opinions are not an advantage of quantitative risk assessment but rather an advantage of qualitative risk assessment.
2. A. What helps demystify these formulas is recalling what each value represents. Recall that SLE is the single loss expectancy of an asset, EF is the exposure factor, and a higher EF means a higher exposure (higher vulnerability of that asset). So, it's reasonable to understand that expectancy of a loss goes higher when the exposure is higher. Single loss expectancy is a product of both the asset's value and how vulnerable that asset is to a loss.
3. B. Although a qualitative assessment generally requires much less time than a quantitative one, a qualitative ...