AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/secplus-risk-likelihood-impact

In NIST SP 800-30, risk is a function of which two factors?

Start playing free

  1. Asset price and purchase date
  2. Likelihood and impact
  3. Number of users and number of servers

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Security Pro Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. NIST SP 800-30 Rev. 1, Guide for Conducting Risk Assessments nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-30r1.pdf Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyUnder NIST SP 800-63B-4, what is the minimum length for a password used as the only authentication factor?Security & PrivacyWhat does NIST SP 800-63B-4 say about password rules like requiring a mix of symbols, digits and capitals?Security & PrivacyA legacy device can no longer be patched because the vendor ended support. What does NIST SP 800-40r4 suggest?

That's stuff everyone should know.