ANSI ASIS PAP.1-2012 Physical Asset Protection APP Practice Exam

In risk management, vulnerability is best described as:

External threat Intrinsic properties that create susceptibility to risk A specific security control A remediation action

Correct Answer:

Intrinsic properties that create susceptibility to risk

Explanation:

Vulnerability means inherent weaknesses that make an asset, system, or process susceptible to harm. It’s about the conditions inside the asset that allow threats to cause damage, not the threat itself or the protective measures. A vulnerability is what a threat can exploit—think of unpatched software, weak configurations, or gaps in procedures. When such weaknesses exist, the risk rises because a threat has a feasible path to cause impact. The other options describe things that aren’t vulnerabilities: an external threat is the attacker or event; a security control is a safeguard; a remediation action is how you fix the weakness.

Access more questions from this quiz

Continue to ANSI ASIS PAP.1-2012 Physical Asset Protection APP Practice Exam for more practice questions and the full quiz experience.

Access More Questions