Which statement best defines a threat as used in the material?

Which statement best defines a threat as used in the material?

• A. A threat is something that 'wants' to cause harm to a system
• B. A threat is a vulnerability that can be exploited
• C. A threat is a safeguard that prevents harm
• D. A threat is the recovery plan after an incident

Answer: (A)

A threat is a potential cause of harm to a system, representing something with the motivation or capability to cause damage. Saying a threat “wants to cause harm” captures the idea that threats originate from sources (people, events, or conditions) that could exploit a weakness to do harm. This helps distinguish threat from other concepts: a vulnerability is the weakness that could be exploited, a safeguard is a protection that reduces risk, and a recovery plan is what you do after an incident. For example, a cybercriminal trying to steal data is a threat because of the intent to cause harm, while the weakness they might exploit is a weak password (the vulnerability).