Which term best describes a weakness that can be exploited to breach security?

Which term best describes a weakness that can be exploited to breach security?

• A. Threat
• B. Risk
• C. Security Gap
• D. Vulnerability

Answer: (D)

A vulnerability is a weakness in a system, its design, implementation, or operation that could be exploited to breach security. It’s the flaw or gap that a threat actor could take advantage of. A threat is a potential source of harm, such as a hacker or a malware campaign; risk is the likelihood and impact of that harm occurring, given the vulnerability. The term security gap is not as precise and is less commonly used in formal risk discussions, whereas vulnerability pins down the exact weakness that could be exploited. For example, unpatched software with a known flaw is a vulnerability that a threat could exploit to gain unauthorized access, leading to a heightened risk if the exposure and impact are significant.

A vulnerability is a weakness in a system, its design, implementation, or operation that could be exploited to breach security. It’s the flaw or gap that a threat actor could take advantage of. A threat is a potential source of harm, such as a hacker or a malware campaign; risk is the likelihood and impact of that harm occurring, given the vulnerability. The term security gap is not as precise and is less commonly used in formal risk discussions, whereas vulnerability pins down the exact weakness that could be exploited. For example, unpatched software with a known flaw is a vulnerability that a threat could exploit to gain unauthorized access, leading to a heightened risk if the exposure and impact are significant.