nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #411

What is the term used to describe the combination of the likelihood of a threat and the potential impact of the threat?

The correct answer is A. Risk. Risk is formally defined as the combination (often expressed as a product) of the likelihood (probability) that a threat will occur and the impact (magnitude of harm) if it does: Risk = Likelihood × Impact. A vulnerability (B) is a weakness that could be exploited. A Zero-Day…

Security Principles

Question

What is the term used to describe the combination of the likelihood of a threat and the potential impact of the threat?

Options

  • ARisk
  • BVulnerability
  • CZero-Day
  • DBreach

How the community answered

(26 responses)
  • A
    92% (24)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Risk is formally defined as the combination (often expressed as a product) of the likelihood (probability) that a threat will occur and the impact (magnitude of harm) if it does: Risk = Likelihood × Impact. A vulnerability (B) is a weakness that could be exploited. A Zero-Day (C) is an unpatched, publicly unknown vulnerability. A breach (D) is an actual security incident. Only 'Risk' (A) captures the combined likelihood-and-impact relationship.

Topics

#Risk Management#Threat Assessment#Likelihood#Impact

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice