A security analyst has been asked to develop a quantitative risk analysis and risk assessment for the
company’s online shopping application. Based on heuristic information from the Security Operations Center
(SOC), a Denial of Service Attack (DoS) has been successfully executed 5 times a year. The Business
Operations department has determined the loss associated to each attack is $40,000. After implementing
application caching, the number of DoS attacks was reduced to one time a year. The cost of the
countermeasures was $100,000. Which of the following is the monetary value earned during the first year of
operation?

A.
$60,000

B.
$100,000

C.
$140,000

D.
$200,000