CISA Certified Information Systems Auditor – Question1877

You should know the difference between an exploit and a vulnerability. Which of the following refers to a weakness in the system?

A.
exploit
B. vulnerability
C. both

Correct Answer: B

Explanation:

Explanation:
You should know the difference between an exploit and a vulnerability. An exploit refers to software, data, or commands capable of taking advantage of a bug, glitch or vulnerability in order to cause unintended behavior. Vulnerability in this sense refers to a weakness in the system.