CQI IRCA ISMS Lead Auditor Practice Questions - CQI IRCA ISO IEC 27001 2022 Lead Auditor (Information Security Management Systems) Exam

Which statement best distinguishes a 'threat' from a 'vulnerability'?

A threat is an internal weakness; a vulnerability is an external attacker A threat is a potential cause of an unwanted incident; a vulnerability is a weakness that a threat can exploit A threat and a vulnerability are synonymous in ISO/IEC 27000 A threat is a control failure; a vulnerability is a process gap

Correct Answer:

A threat is a potential cause of an unwanted incident; a vulnerability is a weakness that a threat can exploit

Access more questions from this quiz

Continue to CQI IRCA ISMS Lead Auditor Practice Questions - CQI IRCA ISO IEC 27001 2022 Lead Auditor (Information Security Management Systems) Exam for more practice questions and the full quiz experience.

Access More Questions