CompTIA Security+ (SY0-501) — Question 156

Which of the following is the proper way to quantify the total monetary damage resulting from an exploited vulnerability?

Answer options

• A. Calculate the ALE
• B. Calculate the ARO
• C. Calculate the MTBF
• D. Calculate the TCO

Correct answer: A

Explanation

The correct answer is A, as the Annual Loss Expectancy (ALE) quantifies the potential monetary damage from a vulnerability by considering the frequency of occurrence and the impact. Options B (ARO), C (MTBF), and D (TCO) do not directly measure the financial loss due to an exploited vulnerability, making them incorrect in this context.