Courseiva
Governance, Risk, and CompliancemediumMultiple SelectObjective-mapped

CAS-004 Governance, Risk, and Compliance Practice Question

A risk manager is applying the FAIR model to quantify a risk. Which TWO of the following are primary components used in FAIR analysis? (Select TWO.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Loss Magnitude (LM)

FAIR model decomposes risk into Loss Event Frequency (LEF) and Loss Magnitude (LM). Single Loss Expectancy (SLE) and Annualized Rate of Occurrence (ARO) are used in quantitative risk analysis (e.g., ALE), but not primary FAIR components. Exposure Factor (EF) is part of SLE calculation. Annual Loss Expectancy (ALE) is a result, not a component.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Loss Magnitude (LM)

    Why this is correct

    The probable magnitude of a loss event.

  • Single Loss Expectancy (SLE)

    Why it's wrong here

    Used in classic quantitative analysis, not a primary FAIR component.

  • Annual Loss Expectancy (ALE)

    Why it's wrong here

    A derived result, not a primary component.

  • Loss Event Frequency (LEF)

    Why this is correct

    The probable number of times a loss event occurs in a given timeframe.

  • Annualized Rate of Occurrence (ARO)

    Why it's wrong here

    Related to LEF but not a primary FAIR component; FAIR uses LEF.

About these practice questions

Courseiva writes every CAS-005 question from scratch — 968 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.