Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 10 Discussion

Actual exam question for Isaca's Cybersecurity-Audit-Certificate exam

Question #: 10
Topic #: 1

[All Cybersecurity-Audit-Certificate Questions]

While risk is measured by potential activity, which of the following describes the actual occurrence of a threat?

AAttack

BPayload

CVulnerability

DTarget

Show Suggested Answer

Suggested Answer: A

Anattackis the actual occurrence of a threat, which is a potential activity that could harm an asset. An attack is the result of a threat actor exploiting a vulnerability in a system or network to achieve a malicious objective. For example, a denial-of-service attack is the occurrence of a threat that aims to disrupt the availability of a service.

by Sherita at Feb 12, 2024, 08:01 PM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Viola

7 months ago

Really? I thought it was just a theoretical thing.

upvoted 0 times

...

Lashon

8 months ago

Wait, are we sure it's not the target?

upvoted 0 times

...

Carline

8 months ago

Vulnerability is key, but not the actual threat.

upvoted 0 times

...

Dorethea

8 months ago

I think it's more about the payload.

upvoted 0 times

...

Rosendo

8 months ago

Definitely an attack!

upvoted 0 times

...

Georgene

9 months ago

I practiced a question similar to this, and I think Target might be more about what is being attacked rather than the occurrence of the threat.

upvoted 0 times

...

Paulina

9 months ago

I feel like Vulnerability could be a trick option here, but it doesn't really describe the occurrence itself.

upvoted 0 times

...

Regenia

9 months ago

I'm not entirely sure, but I remember something about Payload being related to the actual damage caused during an attack.

upvoted 0 times

...

Art

9 months ago

I think the answer might be A, Attack, because it refers to the actual act of a threat happening.

upvoted 0 times

...

Susana

9 months ago

Okay, let me break this down. Risk is about potential, so the actual occurrence has to be one of the other options. I'm leaning towards A - Attack, but I want to double-check the definitions to be sure.

upvoted 0 times

...

Yasuko

9 months ago

Hmm, I'm not totally sure about this one. I'm debating between A and C, since both seem related to the actual occurrence of a threat. I'll have to think it through carefully.

upvoted 0 times

...

Gail

9 months ago

This question seems straightforward. I think the answer is A - Attack, since that describes the actual occurrence of a threat.

upvoted 0 times

...

Amos

9 months ago

I'm a bit confused by the wording here. Is the question asking about the actual occurrence, or the description of the actual occurrence? I want to make sure I understand it correctly before answering.

upvoted 0 times

...

Lou

9 months ago

Hmm, I'm a bit confused by the question. I'm not sure which report would be the best one to review in this case. I'll have to re-read the question a few times to make sure I understand it properly.

upvoted 0 times

...

Haley

9 months ago

I'm a little confused by all the different VMware products mentioned. I'll need to make sure I understand the specific capabilities of each one before selecting the best option.

upvoted 0 times

...

Ranee

9 months ago

I remember a practice question where we had to configure the routes on both sides; I feel like we definitely need to configure Washington too.

upvoted 0 times

...

Tawna

10 months ago

Okay, I've got a strategy - I'll start by considering the business objectives and how the IT services support those. That should help me identify the most important risks to address.

upvoted 0 times

...