Which item is correct about the relationship between the security risk management related term
and its proper definition?
1.asset
2.threat
3.vulnerability
4.risk
a. anything that has value to an organization
b. A weakness in a system or its design that could be exploited
c. The likelihood of a particular attack occurring and resulting in an undesirable consequence
d. Any circumstance or event with the potential to cause harm to an information system

A.
a-4, b-3, c-2, d-1

B.
a-1, b-4, c-3, d-2

C.
a-1, b-3, c-4, d-2

D.
a-1, b-3, c-2, d-4