Threat & Vulnerability Assessment Flashcards

Which of the following scenarios BEST illustrates a 'blended threat'?

Answer: A disgruntled employee using stolen credentials to access and leak sensitive digital files

A blended threat combines multiple threat vectors—in this case, both an insider human element and a technical/digital exploitation—to carry out an attack.

When assessing a facility's vulnerability to natural threats, an investigator should FIRST consult:

Answer: Historical data and geographic hazard maps for the region

Historical data and geographic hazard maps provide objective, evidence-based information about what natural threats—floods, earthquakes, tornadoes—are most likely in a specific region.

A CSI investigator notices that a facility's security cameras have predictable blind spots and that security guard patrol routes are fixed and publicly known. Which concept describes exploiting these predictable patterns?

Answer: Pattern-of-life analysis

Pattern-of-life analysis is the study of predictable routines and behaviors; adversaries use this to identify optimal windows of opportunity to exploit security gaps.

Which of the following BEST describes the difference between a threat and a hazard in security assessment?

Answer: A threat involves intent or agency, while a hazard is typically unintentional or natural

In security assessment, a threat implies human intent or agency, whereas a hazard typically refers to unintentional dangers such as natural events or accidents.

During a threat and vulnerability assessment at a retail chain, an investigator recommends implementing 'Crime Prevention Through Environmental Design' (CPTED). This strategy primarily targets:

Answer: Physical environment factors that can reduce criminal opportunity

CPTED is an approach that uses physical environmental design—lighting, sightlines, access points—to reduce the opportunity and perceived risk for criminal activity.

What is the significance of 'threat convergence' in a vulnerability assessment?

Answer: It occurs when several separate threat factors combine to create a more serious risk

Threat convergence occurs when multiple independent threat factors—such as intent, opportunity, and reduced security posture—combine simultaneously to create a significantly elevated risk.

Which of the following assessment tools uses a scoring system to prioritize critical assets and their attractiveness as targets?

Answer: CARVER matrix

The CARVER matrix scores assets across six criteria—Criticality, Accessibility, Recuperability, Vulnerability, Effect, and Recognizability—to prioritize targets for protection.