Free Cisco 200-201 Actual Exam Questions - Question 13 Discussion
C, vulnerability is the weakness, risk is what happens if it’s exploited.
A seems off because it separates vulnerability as just entry points, missing that it’s about weaknesses. Risk definitely includes the chance something bad happens, not just the possibility of entry.
Guessing D here. The way it's worded, risk sounds like the threat itself trying to get in, while vulnerability is what attackers use to break in—so more like the exploit. It flips the usual definitions but fits with what they describe. A and B seem off because they mix up threat and vulnerability terms, and C talks about damage but doesn’t clarify how risk relates to threat actions. D gives a clearer separation between the attacker’s tool (vulnerability) and the attacker’s intent or method (risk).
C Vulnerability is the actual weakness, while risk includes the chance that weakness gets exploited and what damage might follow. That makes it clearer than A or B, which confuse the terms a bit.
It’s A, since vulnerability is about weak points, while risk is the chance those points get exploited.
Actually, B doesn't fit because it reverses the roles of risk and vulnerability. Risk is about the chance and impact, not the threat itself, so C nails the distinction better.
A imo, because vulnerability is more about the weak points that could be exploited, while risk captures the likelihood and impact of those vulnerabilities being targeted. The others kind of blur the lines or swap definitions around too much. C is close but risk isn’t just damage; it’s a combination of likelihood and impact, not just the damage alone.
Makes sense to see C as the answer since vulnerability is definitely a flaw or weakness, and risk is more about the chance and impact of that flaw being exploited. A and D mix up the terms a bit, and B doesn’t quite capture the right relationship between risk and vulnerability. So yeah, C feels like the best fit here.
C imo, vulnerability is a flaw, risk is the potential damage.