Exam CRISC topic 1 question 900 discussion

Option C I mean

Option D mean

Both A and C are Threats... A is a threat because if the laptop is lost or stolen, sensitive corporate data could be easily accessed by unauthorized individuals. Encryption helps protect data by making it difficult for unauthorized users to interpret or use the information without the proper decryption key. C is a threat because the virus on the USB thumb drive could potentially infect the system it is connected to, leading to the compromise of data, disruption of operations, or unauthorized access. Viruses and malware spread through infected removable media, and users should exercise caution when connecting external devices to their systems.

C. A virus transmitted on a USB thumb drive A threat is an event or circumstance that has the potential to cause harm or damage to an organization's assets, operations, or information. In this scenario, a virus transmitted on a USB thumb drive represents a clear threat because it can potentially introduce malicious software into an organization's systems, compromising their security and integrity. This type of threat is associated with the intentional actions of individuals seeking to harm an organization, which is a common characteristic of threats in the context of information security and risk management.

Going with C. No question that a virus is a threat.

C. A virus transmitted on a USB thumb drive A threat refers to a potential event or circumstance that may exploit a vulnerability and cause harm to an organization's assets or operations. In this case, a virus transmitted on a USB thumb drive represents a threat, as it has the potential to compromise the security and integrity of an organization's systems and data if it is introduced into the environment.

Agree 'C'.

Option C , virus is threat agent

Answer is D - Virus is a Threat, every other options represent vulnerabilities (weakness)

You will see the answer by rating them based on severity.

Ok so what about it? Do you have another answer?

Threats are circumstances or events with the potential to cause harm to information resources.