nerdexam
(ISC)2

CGRC · Question #409

A set of discrete threat events, associated with a specific threat source or multiple threat sources, partially ordered in time. Response:

The correct answer is A. Threat Scenario. A Threat Scenario is defined as a set of discrete threat events, associated with one or more specific threat sources, which are partially ordered in time, describing a potential sequence of actions. This concept helps in visualizing and analyzing potential attack paths.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

A set of discrete threat events, associated with a specific threat source or multiple threat sources, partially ordered in time. Response:

Options

  • AThreat Scenario
  • BThreat Event
  • CThreat Source
  • DThreat Assessment

How the community answered

(29 responses)
  • A
    93% (27)
  • B
    3% (1)
  • D
    3% (1)

Why each option

A Threat Scenario is defined as a set of discrete threat events, associated with one or more specific threat sources, which are partially ordered in time, describing a potential sequence of actions. This concept helps in visualizing and analyzing potential attack paths.

AThreat ScenarioCorrect

A "Threat Scenario" precisely describes a sequence or set of discrete threat events, linked to one or more threat sources, occurring over time. It's a structured narrative or model used to understand how a threat might materialize and impact an organization, often used in risk assessment.

BThreat Event

A "Threat Event" is a single adverse event, not a set or sequence of events.

CThreat Source

A "Threat Source" is the actor or entity causing a threat (e.g., hacker, natural disaster), not the sequence of events itself.

DThreat Assessment

A "Threat Assessment" is the broader process of identifying and evaluating potential threats, not the specific definition of a timed sequence of threat events.

Concept tested: Definition of threat scenario

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-30r1.pdf

Topics

#Threat Scenario#Risk Terminology#Threat Events#Risk Management

Community Discussion

No community discussion yet for this question.

Full CGRC Practice