Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 376

What is the difference between a vulnerability and an exploit?

Answer options

• A. A vulnerability is a weakness that can be exploited by an attacker.
• B. A vulnerability is a hypothetical event for an attacker to exploit.
• C. An exploit is a hypothetical event that causes a vulnerability in the network.
• D. An exploit is a weakness that can cause a vulnerability in the network.

Correct answer: A

Explanation

The correct answer, A, accurately defines a vulnerability as a weakness that attackers can take advantage of. Option B incorrectly suggests that vulnerabilities are only hypothetical, while C and D mischaracterize exploits and their relationship with vulnerabilities.