EXIN ISFS Practice Questions - EXIN Information Security Foundation (ISO IEC 27001) Exam

In information security, what is the difference between a threat and a vulnerability?

A threat is a potential cause of harm; a vulnerability is a weakness that can be exploited by a threat A threat is a confirmed attack; a vulnerability is a probable attack A threat is an internal risk; a vulnerability is an external risk A threat is a technical weakness; a vulnerability is a human error

Correct Answer:

A threat is a potential cause of harm; a vulnerability is a weakness that can be exploited by a threat

Access more questions from this quiz

Continue to EXIN ISFS Practice Questions - EXIN Information Security Foundation (ISO IEC 27001) Exam for more practice questions and the full quiz experience.

Access More Questions