ISO 27001 Lead Auditor Practice Questions - PECB ISO IEC 27001 Lead Auditor Exam

Which statement best distinguishes a 'threat' from a 'vulnerability'?

A threat is an internal weakness; a vulnerability is an external attacker A threat is a potential cause of an unwanted incident; a vulnerability is a weakness that a threat can exploit A threat and a vulnerability are synonymous in ISO/IEC 27000 A threat is a control failure; a vulnerability is a process gap

Correct Answer:

A threat is a potential cause of an unwanted incident; a vulnerability is a weakness that a threat can exploit

Access more questions from this quiz

Continue to ISO 27001 Lead Auditor Practice Questions - PECB ISO IEC 27001 Lead Auditor Exam for more practice questions and the full quiz experience.

Access More Questions