(ISC)2 Certified in Cybersecurity Practice Exam

In cybersecurity practices, which of the following is a common term for a system-level risk?

1. Breach

2. Threat

3. Vulnerability

4. Incident

The correct answer is: Breach

In the context of cybersecurity, a common term for a system-level risk is best represented by the term "Threat." A threat refers to any circumstance or event with the potential to adversely impact an organization's operations, assets, or individuals through unauthorized access, destruction of data, or disruption of services. It encompasses various potential dangers that might exploit vulnerabilities in a system. On the other hand, a breach specifically refers to the actual occurrence of unauthorized access or data compromise. A vulnerability indicates a weakness in a system that can be exploited by threats, and an incident denotes an occurrence that has resulted in a breach or attack. The distinction here is crucial, as threats highlight potential risks rather than actual events or conditions.