Study. uk . com
  1. Home
  2. All questions
  3. Question 416

CISSP study material · question 416 of 500

A power failure takes down a data hall. Under the vocabulary of NIST SP 800-61 Rev. 3, how is this classified, and is it in scope?

  1. An adverse cybersecurity event, since availability of a computing asset was affected.
  2. An event that is neither adverse nor in scope, since no attacker was involved.
  3. A cybersecurity incident, since availability was lost.
  4. An adverse event, since it has a negative consequence, but out of scope because the guide addresses adverse cybersecurity events only.
Show the answer

Answer: D. An adverse event, since it has a negative consequence, but out of scope because the guide addresses adverse cybersecurity events only.

An adverse event is any event with a negative consequence regardless of cause, including natural disasters and power failures, but the guide addresses only adverse cybersecurity events.

Source: NIST SP 800-61 Rev. 3 (NIST) — SP 800-61r3 > 1. Introduction

Challenge yourself on this topic → Study as cards