Certified Chief Information Security Officer (CCISO) — Question 47

Quantitative Risk Assessments have the following advantages over qualitative risk assessments:

Answer options

• A. They are subjective and can be completed more quickly
• B. They are objective and express risk / cost in approximates
• C. They are subjective and can express risk / cost in real numbers
• D. They are objective and can express risk / cost in real numbers

Correct answer: D

Explanation

The correct answer is D because Quantitative Risk Assessments use objective data to provide specific numerical values for risk and cost, making them more precise. Options A and C are incorrect as they describe subjective assessments, which do not provide the accuracy needed for effective risk management. Option B is inaccurate since it does not capture the capability of quantitative assessments to provide real numbers.