During the systems security engineering lifecycle, cost estimation is most directly used to support which of the following activities?

Identifying all potential vulnerabilities in the system design

Selecting the most cost-effective security architecture among alternatives

Defining the security policy for the organization

Determining the legal penalties for non-compliance with regulations

If a business determines that its customer-facing application can be down for no more than 4 hours before causing significant revenue loss, what is this 4-hour value called?

Mean Time Between Failures (MTBF)

Maximum Tolerable Downtime (MTD)

A security system component has an MTBF of 500 hours. If the component is repairable, what does this value indicate?

On average, the component operates for 500 hours between failures

The component takes 500 hours to repair

The component is guaranteed to fail after exactly 500 hours

The component will fail 500 times in its lifetime

A company's e-commerce platform can tolerate at most 4 hours of downtime before significant revenue loss and contractual penalties occur. The current system has an MTBF of 500 hours and an MTTR of 2 hours. The security team is evaluating whether to add a redundant component that would increase MTBF to 800 hours but also increase MTTR to 3 hours due to added complexity. Which option best meets the MTD requirement?

Neither option meets the MTD because MTTR must be less than MTD

Keep the current system because its MTTR is lower

Both options meet the MTD because MTTR is less than MTD in both cases

Add the redundant component because it increases MTBF

Information Systems Security Engineering Professional

Domain 1Objective 6

Resource Analysis (e.g., Cost Estimation, Personnel Costs, Probabilities and Statistics (Monte Carlo)) ISSEP Practice Questions (Page 4)

Part of the Systems Security Engineering Foundations domain, which accounts for 24% of the ISSEP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 3–5 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

24%of the exam

10 Concepts in This Objective

Cost Estimation Fundamentals
Cost Estimation Methods
Personnel Cost Calculation
Probability Basics
Monte Carlo Simulation
Mean Time Between Failures (MTBF)
Maximum Tolerable Downtime (MTD)
Mean Time to Failure (MTTF)
Mean Time to Repair (MTTR)
Mean Time to Recovery (MTTR)

Questions 16–20

16foundation · easy
Which cost estimation technique uses historical data and statistical relationships (such as cost per user or cost per server) to forecast the cost of a security engineering project?
Select an answer first
17foundation · easy
During the systems security engineering lifecycle, cost estimation is most directly used to support which of the following activities?
Select an answer first
18foundation · easy
If a business determines that its customer-facing application can be down for no more than 4 hours before causing significant revenue loss, what is this 4-hour value called?
Select an answer first
19foundation · easy
A security system component has an MTBF of 500 hours. If the component is repairable, what does this value indicate?
Select an answer first
20application · medium
A company's e-commerce platform can tolerate at most 4 hours of downtime before significant revenue loss and contractual penalties occur. The current system has an MTBF of 500 hours and an MTTR of 2 hours. The security team is evaluating whether to add a redundant component that would increase MTBF to 800 hours but also increase MTTR to 3 hours due to added complexity. Which option best meets the MTD requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSEP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSEP” is a trademark of its owner, used for identification only.

Resource Analysis (e.g., Cost Estimation, Personnel Costs, Probabilities and Statistics (Monte Carlo)) ISSEP Practice Questions (Page 4)

Questions 16–20

Which cost estimation technique uses historical data and statistical relationships (such as cost per user or cost per server) to forecast the cost of a security engineering project?

During the systems security engineering lifecycle, cost estimation is most directly used to support which of the following activities?

If a business determines that its customer-facing application can be down for no more than 4 hours before causing significant revenue loss, what is this 4-hour value called?

A security system component has an MTBF of 500 hours. If the component is repairable, what does this value indicate?

Keep studying — Systems Security Engineering Foundations