Câu 334: Isaca Certified Information Security Manager

Determining the risk for a particular threat/vulnerability pair before controls are applied can be expressed as:

1. A. the likelihood of a given threat attempting to exploit a vulnerability.
2. B. the magnitude of the impact, should a threat exploit a vulnerability.
3. C. a function of the cost and effectiveness of controls over a vulnerability.
4. D. a function of the likelihood and impact, should a threat exploit a vulnerability. — đáp án hiện tại