ITPEC IP October 2019 Question 36

An unexpected disaster-related power failure is a threat because it is an event capable of harming information assets and interrupting service. A threat may exploit or act upon a weakness and cause loss of confidentiality, integrity, or availability.

Answer (d)

Why not others:
- unencrypted communication is a vulnerability
- inconsistent confidential-document procedures are a vulnerability
- a door that cannot be locked is a physical vulnerability

Key rule: A threat is a potential cause of harm; a vulnerability is a weakness that makes the harm more likely or severe.

AI-generated — may contain errors