Which term defines a flaw or weakness that may lead to compromise if exploited?

Which term defines a flaw or weakness that may lead to compromise if exploited?

• A. Encryption.
• B. Vulnerability.
• C. Firewall.
• D. Patch management.

Answer: (B)

The idea being tested is a flaw or weakness in a system that could be exploited to cause harm. In security terms, that is a vulnerability. It’s the vulnerability that an attacker could take advantage of to gain unauthorized access, exfiltrate data, or disrupt services. Encryption, firewall, and patch management are all controls or processes that help reduce risk, but they aren’t the flaw itself. Encryption protects data so that even if someone accesses it, they can’t read it. A firewall acts as a barrier to limit unwanted traffic. Patch management is about applying fixes to remove known weaknesses. A vulnerability is what remains before an attacker takes action—something that can be exploited if not addressed.

The idea being tested is a flaw or weakness in a system that could be exploited to cause harm. In security terms, that is a vulnerability. It’s the vulnerability that an attacker could take advantage of to gain unauthorized access, exfiltrate data, or disrupt services.

Encryption, firewall, and patch management are all controls or processes that help reduce risk, but they aren’t the flaw itself. Encryption protects data so that even if someone accesses it, they can’t read it. A firewall acts as a barrier to limit unwanted traffic. Patch management is about applying fixes to remove known weaknesses. A vulnerability is what remains before an attacker takes action—something that can be exploited if not addressed.