A company is looking to improve their security posture by addressing risks uncovered by a recent penetration test. Which of the following risks is MOST likely to
affect the business on a day-to-day basis?

A.
Insufficient encryption methods

B.
Large scale natural disasters

C.
Corporate espionage

D.
Lack of antivirus software

Explanation:
The most common threat to computers is computer viruses. A computer can become infected with a virus through day-to-day activities such as browsing web sites
or emails. As browsing and opening emails are the most common activities performed by all users, computer viruses represent the most likely risk to a business.
Incorrect Answers:
A: Insufficient encryption methods do not represent the most likely risk to a business. While some weaker encryption methods are still used today, it still takes
some determined effort to decrypt the data. This is not something that would happen on a day-to-day basis. Therefore, this answer is incorrect.
B: Large scale natural disasters obviously are bad for computer networks. However, they’re pretty rare. They certainly don’t happen on a day-to-day basis.
Computers becoming infected with a virus are much more common. Therefore, this answer is incorrect.
C: Corporate espionage is a risk to any business. However, it doesn’t happen on a day-to-day basis. Computers becoming infected with a virus are much more
common. Therefore, this answer is incorrect.