CGRC · Question #409
A set of discrete threat events, associated with a specific threat source or multiple threat sources, partially ordered in time. Response:
The correct answer is A. Threat Scenario. A Threat Scenario is defined as a set of discrete threat events, associated with one or more specific threat sources, which are partially ordered in time, describing a potential sequence of actions. This concept helps in visualizing and analyzing potential attack paths.
Question
A set of discrete threat events, associated with a specific threat source or multiple threat sources, partially ordered in time. Response:
Options
- AThreat Scenario
- BThreat Event
- CThreat Source
- DThreat Assessment
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- D3% (1)
Why each option
A Threat Scenario is defined as a set of discrete threat events, associated with one or more specific threat sources, which are partially ordered in time, describing a potential sequence of actions. This concept helps in visualizing and analyzing potential attack paths.
A "Threat Scenario" precisely describes a sequence or set of discrete threat events, linked to one or more threat sources, occurring over time. It's a structured narrative or model used to understand how a threat might materialize and impact an organization, often used in risk assessment.
A "Threat Event" is a single adverse event, not a set or sequence of events.
A "Threat Source" is the actor or entity causing a threat (e.g., hacker, natural disaster), not the sequence of events itself.
A "Threat Assessment" is the broader process of identifying and evaluating potential threats, not the specific definition of a timed sequence of threat events.
Concept tested: Definition of threat scenario
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-30r1.pdf
Topics
Community Discussion
No community discussion yet for this question.