Systems Security Certified Practitioner – SSCP – Question0535

What is called an event or activity that has the potential to cause harm to the information systems or networks?

A. Vulnerability
B. Threat agent
C. Weakness
D. Threat

Correct Answer: D

Explanation:

Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Pages 16, 32.