RAID Level 5 stripes the data and the parity information at the block level across all the drives in the set.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the
Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 66.

The formula ALE = ARO x SLE involves numerical values or quantities of a given resource or occurrence so it is thus a quantitative analysis.
ALE = Annual Lose expectancy or how much it might cost per year if you were to lose the asset
ARO = Annual Rate of Occurrence or how often the loss might occur.
SLE = Single Loss Expectancy or how much each incident of loss would cost the organization.
Using these values you can determine how much you should spend to secure the resources against loss.
It is useful to use these costs when we compare them to the value of the asset for which we are responsible.
It wouldn't be sensible to spend $10,000 USD a year for an asset you could replace for
$2,000 USD.
The following answers are incorrect:
- Qualitative Analysis: This is part of the risk analysis process where interviews are conducted with employees to determine risk and where focus should be made for protecting assets. Many analysts combine Quantitative and Qualitative risk assessments to form an effective picture of where dollars should be spent to secure critical resources for the organization. It is not a correct answer because it does not use a mathematical formula to determine a hard value.
- Objective Analysis: This is not a commonly used term to describe an approach to risk analysis but an objective approach could be likened more to a quantitative analysis where specific values are determined in the risk analysis process.
- Expected Loss Analysis: This is also not a common term in risk analysis but it could describe the concept of analysis an expected loss due to a threat for which you must plan.
The following reference(s) was used to create this question:
Gregg, Michael; Haines, Billy (2012-02-16). CASP: CompTIA Advanced Security
Practitioner Study Guide Authorized Courseware: Exam CAS-001 (p. 215). Wiley. Kindle
Edition.

The correct answer is Rijndael. The other answers are examples of asymmetric key systems.

A reciprocal agreement is where two or more organizations mutually agree to
provide facilities to the other if a disaster occurs. The organizations must have similiar hardware
and software configurations. Reciprocal agreements are often not legally binding.
Reciprocal agreements are not contracts and cannot be enforced. You cannot force someone you
have such an agreement with to provide processing to you.
Government regulators do not accept reciprocal agreements as valid disaster recovery sites.
Cold sites are empty computer rooms consisting only of environmental systems, such as air
conditioning and raised floors, etc. They do not meet the requirements of most regulators and
boards of directors that the disaster plan be tested at least annually.
Time Brokers promise to deliver processing time on other systems. They charge a fee, but cannot
guaranty that processing will always be available, especially in areas that experienced multiple
disasters.
With the exception of providing your own hot site, commercial hot sites provide the greatest
protection. Most will allow you up to six weeks to restore your sites if you declare a disaster. They
also permit an annual amount of time to test the Disaster Plan.
References:
OIG CBK Business Continuity and Disaster Recovery Planning (pages 368 - 369)
The following answers are incorrect:
hot site. Is incorrect because you have a contract in place stating what services are to be
provided.
warm site. Is incorrect because you have a contract in place stating what services are to be
provided.
cold site. Is incorrect because you have a contract in place stating what services are to be
provided.