easyMultiple Choice
SSCP Practice Question: Which metric is used to measure the potential…
Which metric is used to measure the potential loss from a single occurrence of a risk?
⚠ Common exam trap
ISC2 often tests the distinction between SLE and ALE, trapping candidates who confuse a single-event loss with an annualized figure, especially when the question explicitly asks for 'single occurrence' but the answer options include ALE as a distractor.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Single Loss Expectancy (SLE)
The Single Loss Expectancy (SLE) is the metric used to measure the potential loss from a single occurrence of a risk. It is calculated as Asset Value (AV) multiplied by the Exposure Factor (EF), providing a dollar value for one incident. This directly answers the question of loss per single event.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Exposure Factor (EF)
Why it's wrong here
Exposure Factor is the percentage of an asset's value destroyed by a single incident, not the monetary loss itself. It is tempting because EF feeds directly into the Single Loss Expectancy calculation (SLE = AV × EF), so it appears in the same risk formula, but the question asks for the resulting loss figure.
- ✗
Annualized Loss Expectancy (ALE)
Why it's wrong here
ALE estimates total yearly loss by multiplying SLE by ARO, so it aggregates many occurrences across a year. It is tempting because it quantifies risk financially, but it is not per-occurrence. Single Loss Expectancy is the metric for one occurrence.
- ✗
Annualized Rate of Occurrence (ARO)
Why it's wrong here
ARO measures how often a risk occurs per year, not the loss from one occurrence. It is tempting because it feeds the ALE calculation, but it quantifies frequency. The single-occurrence loss is the Single Loss Expectancy, derived from asset value and exposure factor.
- ✓
Single Loss Expectancy (SLE)
Why this is correct
Single Loss Expectancy quantifies the monetary loss from one risk occurrence, directly satisfying the stem's requirement for a single-event metric. It is calculated as asset value multiplied by exposure factor, giving the expected cost per incident before annual frequency is applied. Annualised Loss Expectancy, by contrast, aggregates multiple occurrences across a year.
Go deeper
Related to this question
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.