Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 18

Which of the following would be defined as an absence or weakness of a safeguard that could be exploited?

A. a threat

B. a vulnerability

C. a risk

D. an exposure

Step 1 of 2

Absence or weakness of a safeguard

A system is vulnerable to exploitation in absence or weakness of any safeguard. Hence, vulnerability can be defined as the absence of a safeguard or implementation of a weak safeguard which can be easily exploited.

Thus the correct option is.