ccna certification braindumps

ccna certification braindumps. QuantitativeRiskAnalysis: uses a mathematical model to assign a monetary value to the asset value, the cost of the identified threat, and the overhead of the security implementation solution. The monetary value is typically calculated based on annual overhead.Qualitative Risk Analysis: Qualitative risk analysis is used when the time available for risk assessment is limited, budgets are tight, or relevant data and experience are lacking. Qualitative risk analysis is descriptive rather than measurable. In qualitative risk analysis, the research is exploratory in nature and may not always be representable by icons, and may not be mathematically provable.298 Chapter io Managing a Secure NetworkIt is primarily concerned with understanding why risks exist and how different solutions can address them. Quantitative risk analysis is mathematically more precise and is often used by organizations to justify the cost of proposed countermeasures.10.1.2.3 Single Loss Expectation Quantitative Risk AnalysisQuantitative risk analysis relies on specific formulas to determine the values of risk-determining variables. These specific formulas are used to calculate the values of the following variables. Asset Value: Asset Value includes the purchase price, deployment costs, and maintenance costs. For a database or web server, the AV should also include development costs. The calculation of AV is not straightforward.Exposure Factor: The Exposure Factor is an estimate of the amount of damage that could occur. For example, suppose a flood is sufficient to affect an e-banking data center. What is the probability that it will destroy the data center? Is the damage 60%, 80%, or 100%? The risk assessment team must evaluate all possibilities and make a decision. In this e-banking example, assuming that all media and data are backed up off-site, the only loss in the event of a flood would be to hardware and productivity. Therefore, the risk assessment team may assume that the destruction factor of a flood is 60%0 Looking at another example, let's consider the case of a data entry error, which is much less destructive than a flood. The risk factor for a single data entry error is likely to be less than 1%,or 0.001%.SingleLoss Expectancy: The expected loss from the occurrence of a single threat. AnnualizedRateofOccurrence (ARO): A measure of how often an event occurs, used to calculate ALEoAnnualized Loss Expectancy (ALE): The expected financial impact of an individual threat on an organization.