200-201 · Question #220
Drag and Drop Question Drag and drop the security concept from the left onto the example of that concept on the right. Answer:
The correct answer is anything that can exploit a weakness that was not mitigated; a gap in security or software that can be utilized by threats; possibility for loss and damage of an asset or information; taking advantage of a software flaw to compromise a resource. The correct mappings align with precise security definitions: a 'threat' is anything capable of exploiting an unmitigated weakness (an agent or circumstance with potential to cause harm); a 'vulnerability' is the actual gap or weakness in security/software that threats can…
Question
Drag and Drop Question Drag and drop the security concept from the left onto the example of that concept on the right. Answer:
Exhibit
Answer Area
Drag items
Correct arrangement
- anything that can exploit a weakness that was not mitigated
- a gap in security or software that can be utilized by threats
- possibility for loss and damage of an asset or information
- taking advantage of a software flaw to compromise a resource
Explanation
The correct mappings align with precise security definitions: a 'threat' is anything capable of exploiting an unmitigated weakness (an agent or circumstance with potential to cause harm); a 'vulnerability' is the actual gap or weakness in security/software that threats can leverage; 'risk' represents the probability and impact of loss or damage to an asset; and an 'exploit' is the active act of taking advantage of a specific software flaw to compromise a system. These four concepts form a foundational chain in security: threats exploit vulnerabilities, creating risk, via exploits.
Topics
Community Discussion
No community discussion yet for this question.
