| Exam 200-201 | Question id=5976 | Security concepts |
What is the difference between a threat and a risk?
| A. |
Threat represents a potential danger that could take advantage of a weakness, while the risk is the likelihood of a compromise or damage of an asset. | |
| B. |
Risk represents the known and identified loss or danger in the system, while threat is a non-identified impact of possible risks. | |
| C. |
Risk is the unintentional possibility of damages or harm to infrastructure, while the threats are certain and intentional. | |
| D. |
Threat is a state of being exposed to an attack or a compromise, while risk is the calculation of damage or potential loss affecting the organization from an exposure. |