ISC Exam Questions

Which choice below BEST describes a threat as defined in the Operations Security domain?

Which choice below BEST describes a threat as defined in the Operations Security domain?

A.
A potential incident that could cause harm

B.
A weakness in a system that could be exploited

C.
A company resource that could be lost due to an incident

D.
The minimization of loss associated with an incident

Explanation:

Incorrect answer: * “A weakness in a system that could be exploited” describes a vulnerability * “A
company resource that could be lost due to an incident” describes an asset * “The minimization of
loss associated with an incident” describes risk management.