An enterprise network security team is establishing formal terminology for a security awareness program. Match each fundamental security concept on the left to its corresponding description on the right.
- VulnerabilityA flaw or weakness in system design, configuration, or software code that leaves an asset exposed.
- ThreatAny potential circumstance, event, or malicious actor with the capability to cause harm or disrupt operations.
- RiskThe operational or financial impact resulting from the probability that a specific weakness will be targeted.
- ExploitA specific payload, script, or procedure crafted to leverage a system weakness to gain unauthorized access.
Answer
Vulnerability matches with 'A flaw or weakness in system design, configuration, or software code that leaves an asset exposed.'; Threat matches with 'Any potential circumstance, event, or malicious actor with the capability to cause harm or disrupt operations.'; Risk matches with 'The operational or financial impact resulting from the probability that a specific weakness will be targeted.'; Exploit matches with 'A specific payload, script, or procedure crafted to leverage a system weakness to gain unauthorized access.'
Vulnerability describes internal weaknesses in design or code. Threat identifies potential external forces or malicious actors that cause harm. Risk quantifies the financial or operational impact of a threat targeting a vulnerability. Exploit defines the specific payload or script used to attack a flaw.
Step-by-Step Solution
Key Concept
Key Security Concepts, Threats, Vulnerabilities, and Mitigations