Study. uk . com
  1. Home
  2. All questions
  3. Question 358

CISM study material · question 358 of 1000

Which two broader considerations does SP 800-30 suggest when viewing adversarial threat sources? Choose two.

  1. The patch release schedule that the vendor has published
  2. The potential use of multiple attack vectors
  3. The organisation's insurance cover for the loss that any such attack would be likely to cause
  4. The time such sources may have to exploit identified vulnerabilities
Show the answer

Answer: D. The time such sources may have to exploit identified vulnerabilities
B. The potential use of multiple attack vectors

SP 800-30 widens the lens on adversaries to how long they might have to work on a vulnerability, how large an attack could be, and whether several vectors might be used together.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-1 Identify Threat Sources

Challenge yourself on this topic → Study as cards