CyberCertPrepSecurity FundamentalsCareer AwarenessEASYFree question
What is the difference between a vulnerability and an exploit?
- A.A vulnerability is a weakness in a system; an exploit is the method used to take advantage of that weakness
- B.They mean the same thing
- C.A vulnerability only exists in software; an exploit only exists in hardware; a vulnerability analyst reports findings with no severity rating attached
- D.A vulnerability is intentional; an exploit is accidental
Why A is correct
A vulnerability is a flaw or weakness in a system (like an unpatched software bug or misconfiguration). An exploit is the specific technique, code, or tool that takes advantage of a vulnerability to cause harm. Not all vulnerabilities have known exploits, and some may be difficult to exploit in practice.
Know someone studying for Security Fundamentals? Send them this one.