Study. uk . com
  1. Home
  2. All questions
  3. Question 101

CISSP study material · question 101 of 500

Two identical systems are assessed. One sits in a coastal flood plain; the other is air-gapped in an inland facility. Under NIST SP 800-30, what is the correct name for these site characteristics?

  1. Vulnerabilities, since each is a weakness that could be exploited.
  2. Predisposing conditions, which raise or lower the likelihood that an event causes harm.
  3. Threat sources, since each originates the events in question.
  4. Impact factors, since each changes the magnitude of harm.
Show the answer

Answer: B. Predisposing conditions, which raise or lower the likelihood that an event causes harm.

A predisposing condition increases or decreases the chance that an initiated event results in harm. The flood plain raises it; the absence of external connectivity lowers it.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 > 2.3.1 Vulnerabilities and Predisposing Conditions

Challenge yourself on this topic → Study as cards