Free Cisco 200-201 Actual Exam Questions - Question 1 Discussion
known hacktivist group.
What is the initial event called in the NIST SP800-61?
B/C? The question says "adjusted in response to threats," which sounds like a warning sign before anything actually happens, matching precursor. But initial event might also mean what sets the attack in motion, so trigger fits that too.
C imo since the question says “initial event,” it points to the moment something actually kicks off, not just a warning or sign, so “trigger” fits better than “precursor.”
B/D? I get why B fits as an early sign, but D sounds like it could mean the person or thing causing the event, which might also match “initial event.” A and C feel more like the actual attack starting.
Maybe B since it’s the early sign before anything actually happens.
It’s B because the question talks about adjusting security after threats, which fits precursors as early indicators, not the actual attack starting. The trigger would be the attack kicking off, not the warning.
Guessing B too, since it’s about the warning signs before the real action starts.
Maybe C? Trigger sounds like the start of something.