Certified SOC Analyst (CSA) — Question 6

According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?

Answer options

• A. High
• B. Extreme
• C. Low
• D. Medium

Correct answer: D

Explanation

The correct answer is D because when the probability of an attack is very low, it reduces the overall risk level despite the major impact. Options A and B indicate higher risk levels which do not align with the low probability, while option C suggests a low risk which does not account for the major impact.