Threats and Vulnerabilities

Question 1

Anything that could cause harm, loss, damage, or compromise to our information
technology systems

Answer 1

Threat

Question 2

● Natural disasters
● Cyber-attacks
● Data integrity breaches
● Disclosure of confidential information

Answer 2

Threat that can come from the following

Question 3

Any weakness in the system design or implementation

Answer 3

Vulnerability

Question 4

● Software bugs
● Misconfigured software
● Improperly protected network devices
● Missing security patches
● Lack of physical security

Answer 4

Vulnerability that can come from internal factors like the following

Question 5

Where threats and vulnerabilities intersect

Answer 5

Where the risk to your enterprise
systems and networks lies

Question 6

If you have a threat, but there is no matching vulnerability to it, then you have no
risk

Answer 6

TRUE

Question 7

The same holds true that if you have a vulnerability but there’s no threat against
it, there would be no risk

Answer 7

TRUE

Question 8

Finding different ways to minimize the likelihood of an outcome and achieve the
desired outcome

Answer 8

Risk Management