Resource Analysis (e.g., Cost Estimation, Personnel Costs, Probabilities and Statistics (Monte Carlo)) ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company's customer portal has an MTD of 2 hours. The current disaster recovery plan has a recovery time objective (RTO) of 4 hours, which exceeds the MTD. The security team is considering two improvements: (1) implement automated failover to reduce RTO to 1 hour, costing $50,000; (2) increase backup frequency to reduce data loss, costing $20,000. Which action should the team take to meet the MTD?

   • AImplement automated failover only
   • BImplement both improvements
   • CIncrease backup frequency only
   • DNeither improvement will meet the MTD
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   For a non-repairable security component, what does Mean Time to Failure (MTTF) represent?

   • AThe maximum time the component can operate without failure
   • BThe average time between failures for a repairable component
   • CThe average time taken to replace the failed component
   • DThe average time the component operates before it fails and cannot be repaired
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A security camera is considered non-repairable and is replaced upon failure. If the camera has an MTTF of 10,000 hours, what does this indicate?

   • AThe camera will fail exactly after 10,000 hours of operation
   • BThe camera can be repaired in 10,000 hours
   • CThe camera will fail 10,000 times in its lifetime
   • DOn average, the camera operates for 10,000 hours before it fails
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does a lower Mean Time to Repair (MTTR) affect system availability?

   • AIt increases the time between failures
   • BIt increases availability because the system spends less time in a failed state
   • CIt decreases availability because repairs are rushed and may be incomplete
   • DIt has no effect on availability
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   If two security events are independent, what is the probability that both events occur?

   • AThe difference between their individual probabilities
   • BThe sum of their individual probabilities
   • CThe average of their individual probabilities
   • DThe product of their individual probabilities
   Reveal Solution Discussion Select an answer first