Which of the following would BEST be defined as an absence or weakness of safeguard that could be exploited?

The correct answer is B. A vulnerability. A vulnerability is specifically defined as an absence or weakness in a safeguard or control that could be exploited by a threat. A threat (A) is the potential danger itself. A risk (C) is the likelihood that a threat will exploit a vulnerability, combined with the impact. An expo

Submitted by manish99· Apr 18, 2026Security Concepts and Practices

Question

Options

AA threat
BA vulnerability
CA risk
DAn exposure

How the community answered

(23 responses)

B
87% (20)
C
9% (2)
D
4% (1)

Explanation

A vulnerability is specifically defined as an absence or weakness in a safeguard or control that could be exploited by a threat. A threat (A) is the potential danger itself. A risk (C) is the likelihood that a threat will exploit a vulnerability, combined with the impact. An exposure (D) is the condition of being subject to potential loss. The question's phrasing - 'absence or weakness of safeguard that could be exploited' - is the textbook definition of vulnerability.

Topics

#Vulnerability#Information Security Concepts#Risk Management Basics

Community Discussion

No community discussion yet for this question.

Full SSCP Practice