Which two circumstances does SP 800-30 say mean an adversary is not expected to initiate a threat event? Choose two.

Answer: D. The event demands more capability than the adversary possesses and knows it lacks
C. The adversary would not achieve its intended objective by executing the event

SP 800-30 states adversaries are not expected to initiate events requiring more capability than they possess and know they lack, events that would not achieve their objectives, or events against organisations they are not actively targeting.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 2-4 Determine Likelihood