Most people studying for SY0-701 can recite the quantitative risk formulas in their sleep. Then the exam hands them a word problem where the frequency is phrased as "once every four years" instead of a clean decimal, and half the room writes down a different answer. The math is not hard. The wording is where points leak out.
Here is the whole chain, in order, with no shortcuts.
The five values, in the order they build on each other
AV (Asset Value) is what the thing is worth. A server, a database, a building. Say a customer database is valued at $200,000.
EF (Exposure Factor) is the percentage of that value you lose in one bad event. Not every incident destroys the whole asset. A ransomware hit might cost you 40 percent of the database's value in downtime, recovery, and lost records. EF is 0.40.
