Question $2$

George is performing a risk analysis on a potential DoS $($Denial of Service$)$ attack against his company's web server, which sells Widgets. The company's web server is valued at $$100,000.$

George estimates that if a DoS attack occurs, it would render the server unusable for a few hours, resulting in a $25\%$ loss of functionality during that time. The company's financial loss due to

lost sales, recovery costs, and other factors is expected to be $$15,000$ per incident. George estimates that such an attack could occur twice per year. What is the Exposure Factor $($EF$)$ in

percentage for the web server in case of a DoS attack?

$10\%$