Both ISACA and the GTAG define vulnerability.Which of the following does not represent one of these definitions?
A)The nature of IT resources that can be exploited by a threat to cause damage.
B)An organizations' exposure to disaster.
C)Weaknesses or exposures in IT assets that may lead to business,compliance,or security risk.
D)All of the other items represent the definitions of vulnerability stated by ISACA and the GTAG.

Question

Quizplus · Accepted Answer

The definition of vulnerability according to ISACA and the GTAG is related to weaknesses or exposures in IT assets that may lead to business, compliance, or security risk. Option A represents the ISACA and GTAG definition, and option C is a more detailed explanation of the same definition. Option D is a true statement because all of the other options represent the definitions of vulnerability stated by ISACA and the GTAG. Option B, however, refers to an organization's exposure to disaster, which is not directly related to vulnerability in the context of information security.

Both ISACA and the GTAG Define Vulnerability