Answers to Review Questions

1. D. The annualized loss expectancy (ALE) represents the total potential loss a company may experience within a single year due to a specific risk to an asset. EF is the percentage of asset value loss that would occur if a risk was realized. SLE is the potential dollar value loss from a single risk realization incident. ARO is the statistical probability that a specific risk may be realized a certain number of times in a year.

2. D. The primary goal of auditing is to check compliance with security policy. Virus infection detection is handed by a virus scanner. Rogue service detection is performed manually or with a sniffer. Port scanning is performed with a port-scanning tool.

3. A. If the chain of custody is violated ...

Get CompTIA Security+™: Review Guide, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.