nerdexam
Cisco

200-201 · Question #427

What is the difference between vulnerability and risk?

The correct answer is B. A vulnerability is a weakness that can be exploited, and the risk is the potential for loss or. Vulnerability refers to a weakness in a system, application, or network that can be exploited by an attacker to gain unauthorized access or cause harm. Examples include software bugs, misconfigurations, or design flaws. Risk is the potential for loss or damage when a threat…

Submitted by stefanr· Mar 6, 2026Security Concepts

Question

What is the difference between vulnerability and risk?

Options

  • AA risk is a possible danger that an exploit applies to, and a vulnerability represents the threat
  • BA vulnerability is a weakness that can be exploited, and the risk is the potential for loss or
  • CA vulnerability is an attack surface, and the risk is the vector of the attack.
  • DRisk is the assessment of possible weaknesses, and vulnerability is a misconfiguration of an

How the community answered

(63 responses)
  • A
    8% (5)
  • B
    87% (55)
  • C
    3% (2)
  • D
    2% (1)

Explanation

Vulnerability refers to a weakness in a system, application, or network that can be exploited by an attacker to gain unauthorized access or cause harm. Examples include software bugs, misconfigurations, or design flaws. Risk is the potential for loss or damage when a threat exploits a vulnerability. It represents the likelihood that a vulnerability could be exploited, causing negative consequences, such as financial loss, data breaches, or reputational harm.

Topics

#Vulnerability#Risk#Risk management#Threat

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice