A company is looking to improve their security posture by addressing risks uncovered by a recent
penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day
basis?

A.
Insufficient encryption methods

B.
Large scale natural disasters

C.
Corporate espionage

D.
Lack of antivirus software

Explanation:
The most common threat to computers is computer viruses. A computer can become infected with
a virus through day-to-day activities such as browsing web sites or emails. As browsing and
opening emails are the most common activities performed by all users, computer viruses
represent the most likely risk to a business.