alleryStart learning →Risk is commonly expressed as a function of
Aspeed × latency
Bbandwidth × packets
Cusers × sessions
Dthreat × vuln × impact
Answer & Solution
Correct answer: D. threat × vuln × impact
1. In cybersecurity risk management (NIST SP 800-30): RISK = f(THREAT, VULNERABILITY, IMPACT).
2. THREAT: a potential source of attack (hacker, insider, malware).
3. VULNERABILITY: a weakness in the system the threat can exploit.
4. IMPACT: the harm to the organisation if exploited (financial, reputational, operational).
5. Mitigations target each axis: threat intelligence reduces threat exposure, patching reduces vulnerabilities, segmentation limits impact.
_Source: NIST CSF v1.1, §3.4 (Self-Assessing Cybersecurity Risk with the Framework) + NIST SP 800-30 reference._
Keep practising Cybersecurity Fundamentals
Browse all Cybersecurity Fundamentals questions for BCA Cyber Security, or explore more Cybersecurity topics.
Related questions
Swap two tiles to line up one familyDrag each control to its defence layerWhich of the following is a TYPE of MALWARE that encrypts files and demands payment for thA SECURITY INCIDENT is BEST defined asDEFENSE IN DEPTH is a strategy thatPRINCIPLE OF LEAST PRIVILEGE states thatWhich NIST CSF function ensures that PLANS to RESTORE capabilities or services are executeThe CIA TRIAD of information security stands for