An organization has recently adjusted its security stance in response to online threats made by a known hacktivist group. What is the initial event called in the NIST SP800-61?

The correct answer is B. precursor. The term "trigger" is used to denote the initial event or indication that alerts an organization to the possibility of a security incident. It is the event that prompts the organization to take action, investigate further, and potentially initiate the incident handling process…

Submitted by brentm· Mar 6, 2026Security Policies and Procedures

Question

Options

Aonline assault
Bprecursor
Ctrigger
Dinstigator

How the community answered

(21 responses)

A
5% (1)
B
90% (19)
D
5% (1)

Explanation

The term "trigger" is used to denote the initial event or indication that alerts an organization to the possibility of a security incident. It is the event that prompts the organization to take action, investigate further, and potentially initiate the incident handling process as defined by NIST

Topics

#NIST SP800-61#incident response#precursor#threat intelligence

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice