nerdexam
CompTIA

CAS-002 · Question #637

Juan is trying to perform a risk analysis of his network. He has chosen to use OCTAVE. What is OCTAVE primarily used for?

The correct answer is B. A comprehensive risk assessment model. OCTAVE, or Operationally Critical, Threat, Asset and Vulnerability Evaluation is a comprehensive risk assessment model. Answer option A is incorrect. OVAL, or Open Vulnerability Assessment Language is the language for vulnerability assessment. Answer options C and D are…

Research and Analysis

Question

Juan is trying to perform a risk analysis of his network. He has chosen to use OCTAVE. What is OCTAVE primarily used for?

Options

  • AA language for vulnerability assessment
  • BA comprehensive risk assessment model
  • CA threat assessment tool
  • DAn impact analysis tool

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    89% (40)
  • C
    7% (3)
  • D
    2% (1)

Explanation

OCTAVE, or Operationally Critical, Threat, Asset and Vulnerability Evaluation is a comprehensive risk assessment model. Answer option A is incorrect. OVAL, or Open Vulnerability Assessment Language is the language for vulnerability assessment. Answer options C and D are incorrect. Threat assessment and impact analysis are both part of OVAL, but only a part

Topics

#OCTAVE#risk assessment methodology#threat assessment#risk framework

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice