Study. uk . com
  1. Home
  2. All questions
  3. Question 5

CompTIA Security+ study material · question 5 of 611

An analyst argues that because a provisioning server outage was traced to an administrator's mistake, denial of service can be removed from the risk register for that server. Why is this reasoning wrong?

  1. The outage should have been recorded as a vulnerability
  2. Several different threat sources can produce the same threat event
  3. Denial of service is always a higher risk than administrator error
  4. Risk registers may not record availability risks
Show the answer

Answer: B. Several different threat sources can produce the same threat event

One threat event has many possible sources. Confirming one source does not eliminate the others.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3.1 Threats

Challenge yourself on this topic → Study as cards