Study. uk . com
  1. Home
  2. All questions
  3. Question 6

CompTIA Security+ study material · question 6 of 611

After an organisation deploys strong controls on its public web tier, attackers begin targeting a smaller partner instead. What is this behaviour called?

  1. Risk transfer
  2. Threat modelling
  3. Threat shifting
  4. Residual risk
Show the answer

Answer: C. Threat shifting

Threat shifting is the adversary changing timing, target, resources or method in response to a control.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3.1 Threats

Challenge yourself on this topic → Study as cards