CREST Practitioner Security Analyst (CPSA)

What is the difference between a vulnerability and a risk in information security?

A vulnerability is a weakness; a risk is the potential for harm when a threat exploits that weakness A vulnerability is the likelihood of an attack; a risk is the discovered flaw A vulnerability is a business impact; a risk is a technical weakness They are synonymous terms used interchangeably

Correct Answer:

A vulnerability is a weakness; a risk is the potential for harm when a threat exploits that weakness

Access more questions from this quiz

Continue to CREST Practitioner Security Analyst (CPSA) for more practice questions and the full quiz experience.

Access More Questions