Vulnerability is defined as:

Vulnerability is defined as:

• A. A risk that has already materialized
• B. A protective measure
• C. Intrinsic properties of something that creates susceptibility to a source of risk that can lead to a consequence
• D. The probability of a security incident

Answer: (C)

Vulnerability is the inherent weakness or condition of an asset or system that makes it susceptible to a threat, so that a source of risk can lead to a consequence. In other words, it’s about why a threat could cause harm due to the system’s weaknesses or exposed states. This is why the correct definition focuses on intrinsic properties that create susceptibility to a source of risk that can lead to a consequence. A risk that has already materialized is an incident that has occurred, not the underlying weakness. A protective measure is a safeguard used to reduce risk, not the weakness itself. The probability of a security incident describes likelihood, not the system’s susceptibility. For example, an unlocked door is a vulnerability because it creates an opening that a potential intruder could exploit, potentially leading to loss or damage.

Vulnerability is the inherent weakness or condition of an asset or system that makes it susceptible to a threat, so that a source of risk can lead to a consequence. In other words, it’s about why a threat could cause harm due to the system’s weaknesses or exposed states. This is why the correct definition focuses on intrinsic properties that create susceptibility to a source of risk that can lead to a consequence.

A risk that has already materialized is an incident that has occurred, not the underlying weakness. A protective measure is a safeguard used to reduce risk, not the weakness itself. The probability of a security incident describes likelihood, not the system’s susceptibility. For example, an unlocked door is a vulnerability because it creates an opening that a potential intruder could exploit, potentially leading to loss or damage.