Which term describes the degree of uncertainty regarding potential adverse events impacting a system?

Which term describes the degree of uncertainty regarding potential adverse events impacting a system?

• A. Threat Modeling
• B. Risk
• C. Incident Management
• D. Fuzzing

Answer: (B)

The degree of uncertainty about potential adverse events affecting a system is risk. Risk describes how likely it is that a threat will exploit a vulnerability and how severe the resulting impact could be, capturing the uncertainty of what could happen and how bad it would be. In practice, risk is often thought of as likelihood times impact, which helps you prioritize defenses and controls. Threat modeling focuses on identifying threats and designing mitigations to reduce risk, but it isn’t the term for the uncertainty itself. Incident management deals with detecting, responding to, and recovering from events after they occur. Fuzzing is a testing technique used to discover vulnerabilities by sending a lot of unusual inputs, not a measure of overall uncertainty about adverse events.

The degree of uncertainty about potential adverse events affecting a system is risk. Risk describes how likely it is that a threat will exploit a vulnerability and how severe the resulting impact could be, capturing the uncertainty of what could happen and how bad it would be. In practice, risk is often thought of as likelihood times impact, which helps you prioritize defenses and controls.

Threat modeling focuses on identifying threats and designing mitigations to reduce risk, but it isn’t the term for the uncertainty itself. Incident management deals with detecting, responding to, and recovering from events after they occur. Fuzzing is a testing technique used to discover vulnerabilities by sending a lot of unusual inputs, not a measure of overall uncertainty about adverse events.