What is the primary difference between a threat and a vulnerability?

The correct answer is D. A threat is a potential source of harm, while a vulnerability is a weakness in a system. In security terminology, a threat is anything that has the potential to cause harm to a system or organization (e.g., a hacker, malware, natural disaster), while a vulnerability is a weakness or flaw in a system that could be exploited by a threat (e.g., unpatched software…

Security Principles

Question

Options

AA threat is a weakness in a system, while a vulnerability is a potential source of harm
BA threat is a type of attacker, while a vulnerability is an attack method
CA threat is an attack method, while a vulnerability is a type of threat actor
DA threat is a potential source of harm, while a vulnerability is a weakness in a system

How the community answered

(67 responses)

A
4% (3)
B
1% (1)
C
1% (1)
D
93% (62)

Explanation

In security terminology, a threat is anything that has the potential to cause harm to a system or organization (e.g., a hacker, malware, natural disaster), while a vulnerability is a weakness or flaw in a system that could be exploited by a threat (e.g., unpatched software, misconfiguration). Option A reverses the definitions. Options B and C incorrectly conflate threats with attacker types or attack methods. Understanding this distinction is foundational to risk management: Risk = Threat × Vulnerability × Impact.

Topics

#Threats#Vulnerabilities#Cybersecurity Concepts#Risk Management

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice