CompTIA Security+ (SY0-701) — Question 41

A company decided to reduce the cost of its annual cyber insurance policy by removing the coverage for ransomware attacks.
Which of the following analysis elements did the company most likely use in making this decision?

Answer options

• A. MTTR
• B. RTO
• C. ARO
• D. MTBF

Correct answer: C

Explanation

The correct answer is C, ARO (Annualized Rate of Occurrence), as it helps organizations assess the frequency of ransomware attacks and their financial impact. By understanding the ARO, the company could determine if the cost of coverage was justified. MTTR (Mean Time to Recovery), RTO (Recovery Time Objective), and MTBF (Mean Time Between Failures) are not directly related to the decision of reducing insurance costs for ransomware specifically.