What are the three types of vulnerabilities?

What are the three types of vulnerabilities?

• A. Weaknesses; Characteristics; Circumstances
• B. Flaws; Defects; Risks
• C. Threats; Exposures; Impacts
• D. Errors; Omissions; Gaps

Answer: (A)

Vulnerabilities are conditions in a system that could be exploited, and they can be understood through three aspects: weaknesses in design or implementation, characteristics that describe how the vulnerability behaves and what it affects, and the circumstances or environmental factors that enable exploitation (such as configuration, usage patterns, or surrounding conditions). This combination captures both the inherent flaw, how it manifests, and the situational factors that might make it exploitable. This option is the best fit because it explicitly names these three interacting categories—weaknesses, characteristics, and circumstances—which together describe the full nature of a vulnerability. The other groupings mix concepts like potential outcomes or types of issues with vulnerability categories rather than presenting a triplet that defines vulnerability itself.

Vulnerabilities are conditions in a system that could be exploited, and they can be understood through three aspects: weaknesses in design or implementation, characteristics that describe how the vulnerability behaves and what it affects, and the circumstances or environmental factors that enable exploitation (such as configuration, usage patterns, or surrounding conditions). This combination captures both the inherent flaw, how it manifests, and the situational factors that might make it exploitable.

This option is the best fit because it explicitly names these three interacting categories—weaknesses, characteristics, and circumstances—which together describe the full nature of a vulnerability. The other groupings mix concepts like potential outcomes or types of issues with vulnerability categories rather than presenting a triplet that defines vulnerability itself.