Quantitative vs. Qualitative Risk Assessment CSE Practice Questions (Page 9)

Questions 41–43

1. 41foundation · easy

   What is the primary purpose of a hybrid risk assessment approach?

   • ATo eliminate the need for expert judgment.
   • BTo reduce the cost of risk assessment to zero.
   • CTo replace qualitative methods with quantitative ones.
   • DTo combine the strengths of both quantitative and qualitative methods.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is a common disadvantage of quantitative risk assessment?

   • AIt produces results that are difficult to compare.
   • BIt requires significant time, data, and expertise.
   • CIt is subjective and difficult to communicate.
   • DIt cannot be used for cost-benefit analysis.
   Reveal Solution Discussion Select an answer first
3. 43application · medium

   A risk analyst is conducting a quantitative risk assessment for a cloud-based customer database. The analyst has identified the asset value, threats, and vulnerabilities. What is the next step in the quantitative risk assessment process?

   • AAssign qualitative ratings such as high, medium, or low to each risk.
   • BImplement security controls to mitigate the identified risks.
   • CCalculate the Single Loss Expectancy (SLE) and Annualized Loss Expectancy (ALE) for each threat scenario.
   • DConduct a brainstorming session to identify additional threats.
   Reveal Solution Discussion Select an answer first