- Home
- All questions
- Question 2
CompTIA Security+ study material · question 2 of 611
Which two of the following are risk factors in the NIST risk model? Choose two.
Show the answer
Answer: C. Predisposing condition
D. Likelihood
The model's factors are threat, vulnerability, impact, likelihood and predisposing condition. Cost and audit cadence are programme concerns, not risk factors.
Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3.1 Risk Models