Which of the following is not a component of a Operations Security "triples"?
Answer options:
A. Asset
B. Threat
C. Vulnerability
D. Risk
Answer correct:
D
The Operations Security domain is concerned with triples - threats, vulnerabilities and assets. Source: KRUTZ, Ronald L. & VINES, Russel
D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 216.