Which statement is true about threats?

• A. A threat is a potential danger that could exploit a vulnerability.
• B. A threat is a patch.
• C. A threat is a user account.
• D. A threat is a type of firewall.

Answer: (A)

Threats are potential dangers that could exploit a vulnerability. In cybersecurity, a vulnerability is a weakness in a system, and a threat is anything that could take advantage of that weakness to cause harm, such as unauthorized access, data loss, or service disruption. A patch, on the other hand, is a fix that closes or mitigates a weakness; it is not a threat. A user account is an identity or target, not the danger itself, and a firewall is a defensive tool used to block or filter traffic, not a threat. Understanding this helps you assess risk: if a vulnerability exists and a threat actor or event could exploit it, there is a risk of harm.