Resource Analysis (e.g., Cost Estimation, Personnel Costs, Probabilities and Statistics (Monte Carlo)) ISSEP Practice Questions (Page 6)

Questions 26–28

1. 26expert · medium

   A security team is bidding on a project that requires 500 hours of senior engineer time and 300 hours of junior engineer time. The senior engineer's loaded hourly rate is $150, and the junior's is $90. The company wants to include a 15% profit margin on the total cost. What should the bid price be?

   • A$102,000
   • B$117,300
   • C$120,000
   • D$102,000 plus 15% of the senior cost only
   Reveal Solution Discussion Select an answer first
2. 27expert · medium

   A security risk analyst is modeling the probability of a successful cyberattack. The probability of a vulnerability being exploited is 0.3, and if exploited, the probability of a successful breach is 0.4. What is the probability of a successful breach?

   • A0.58
   • B0.10
   • C0.12
   • D0.70
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   In systems security engineering, what is the primary purpose of cost estimation during the resource analysis phase?

   • ATo determine the exact number of security incidents that will occur during the project
   • BTo forecast the financial resources required to implement and sustain security controls
   • CTo measure the effectiveness of security controls after deployment
   • DTo calculate the total value of assets protected by the security system
   Reveal Solution Discussion Select an answer first