CyberCertPrepSecurity FundamentalsCareer AwarenessEASYFree question
What is the difference between a vulnerability and an exploit?
- A.They mean the same thing
- B.A vulnerability is a weakness in a system; an exploit is the method used to take advantage of that weakness
- C.A vulnerability is intentional; an exploit is accidental
- D.A vulnerability only exists in software; an exploit only exists in hardware
Why B is correct
A vulnerability is a flaw or weakness in a system (like an unpatched software bug or misconfiguration). An exploit is the specific technique, code, or tool that takes advantage of a vulnerability to cause harm. Not all vulnerabilities have known exploits, and some may be difficult to exploit in practice.
Know someone studying for Security Fundamentals? Send them this one.