A company is looking to improve their security posture by addressing risks uncovered by a recent
penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day basis?

A.
Insufficient encryption methods

B.
Large scale natural disasters

C.
Corporate espionage

D.
Lack of antivirus software

Explanation:
The most common threat to computers is computer viruses. A computer can become infected with a
virus through day-to-day activities such as browsing web sites or emails. As browsing and opening emails
are the most common activities performed by all users, computer viruses represent the most likely risk to
a business.
Incorrect Answers:
A: Insufficient encryption methods do not represent the most likely risk to a business. While some weaker
encryption methods are still used today, it still takes some determined effort to decrypt the data. This is
not something that would happen on a day-to-day basis.B: Large scale natural disasters obviously are bad for computer networks. However, they’re pretty rare.
They certainly don’t happen on a day-to-day basis. Computers becoming infected with a virus are much
more common.
C: Corporate espionage is a risk to any business. However, it doesn’t happen on a day-to-day basis.
Computers becoming infected with a virus are much more common.