FC0-U71 Security Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  A threat is a potential harm, and a vulnerability is a weakness

  Why this is correct

  A threat is any potential cause of harm, such as an attacker or malware, whereas a vulnerability is an existing weakness — an unpatched flaw or misconfiguration — that a threat could exploit. This distinction satisfies the stem's requirement to separate the external danger from the internal condition it acts upon.

• ✗

  They are the same thing

  Why it's wrong here

  A threat is any potential cause of harm, while a vulnerability is a weakness that a threat can exploit; they are distinct concepts, not synonyms. The option tempts because both appear together in risk discussions, but conflating them removes the exploitable-weakness element entirely.

• ✗

  A threat is a weakness, and a vulnerability is a danger

  Why it's wrong here

  The definitions are reversed: a threat is a potential danger or actor, whereas a vulnerability is the weakness it exploits. The option tempts because both terms describe risk components, but swapping them inverts the causal relationship the question tests.

• ✗

  A threat is a type of malware, and a vulnerability is a type of attack

  Why it's wrong here

  Threats are not a malware category, and vulnerabilities are not an attack type; malware and attacks are specific instances, not the general definitions. The option tempts by associating both terms with security incidents, but it misclassifies each concept's role.

Go deeper

Related to this question