ISACA Exam Questions

Which of the following refers to a weakness in the system?

You should know the difference between an exploit and a vulnerability. Which of the following refers to a
weakness in the system?

A.
exploit

B.
vulnerability

C.
both

Explanation:
You should know the difference between an exploit and a vulnerability. An exploit refers to software, data, or
commands capable of taking advantage of a bug, glitch or vulnerability in order to cause unintended behavior.
Vulnerability in this sense refers to a weakness in the system.