Practice Quiz – Part 2

1. Which of the following best describes a threat?
   1. The likelihood of an event occurring
   2. A weakness in a system or process
   3. An event or action that has the potential to cause harm
   4. The impact of an event or action

Answer: C. An event or action that has the potential to cause harm.

A threat is an event or action that has the potential to cause harm to an organization’s assets, such as its data, systems, or people. Threats can be intentional, such as a cyberattack or theft, or unintentional, such as a natural disaster or equipment failure.

2. Which of the following best describes a vulnerability?
   1. The likelihood of an event occurring
   2. A weakness in a system or process
   3. An event or action that has the potential to cause harm
   4. The impact of an event or action

Answer: B. A weakness in a system or process.

A vulnerability is a weakness in a system or process that can be exploited by a threat to cause harm to an organization’s assets...