Study. uk . com
  1. Home
  2. All questions
  3. Question 98

CISSP study material · question 98 of 500

A data centre loses power when a contractor cuts a feeder cable during unrelated works. Under the threat source taxonomy in NIST SP 800-30, how is this best classified?

  1. A predisposing condition rather than a threat source.
  2. A structural failure of a resource the organisation controls.
  3. Human error of commission by a party outside the organisation's control.
  4. A deliberate physical attack on the organisation's infrastructure.
Show the answer

Answer: C. Human error of commission by a party outside the organisation's control.

SP 800-30 groups sources as hostile attack, human error by action or omission, structural failure of organisation-controlled resources, and natural or man-made disaster. An accidental cable cut is human error.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 > 2.3.1 Threats

Challenge yourself on this topic → Study as cards