CyberCertPrepSecurity FundamentalsThreat LandscapeEASYFree question
What is the relationship between a vulnerability, a threat, and a risk?
- A.A. They all mean the same thing
- B.D. Risk only applies to financial losses
- C.C. A threat is a weakness; a vulnerability is an attacker
- D.B. A vulnerability is a weakness; a threat exploits that weakness; risk is the likelihood and impact of the threat exploiting the vulnerability
Why D is correct
A vulnerability is a weakness (e.g., unpatched software). A threat is anything that could exploit a vulnerability (e.g., an attacker, malware). Risk = the probability of a threat exploiting a vulnerability multiplied by the impact. Security efforts focus on reducing risk by addressing vulnerabilities and mitigating threats.
Know someone studying for Security Fundamentals? Send them this one.