What is the objective of vulnerability assessment?

What is the objective of vulnerability assessment?

• A. Weakness
• B. Threat
• C. Risk
• D. Compliance

Answer: (A)

The main idea is to uncover weaknesses in a system’s security controls. A vulnerability is a flaw, misconfiguration, or gap that could be exploited by an attacker. The purpose of vulnerability assessment is to identify these weaknesses so they can be prioritized and fixed before they are exploited. A threat is something that could exploit a vulnerability, but the assessment’s goal isn’t to identify threats themselves. Risk combines both the likelihood of an exploit and its potential impact, and vulnerability assessment informs that process rather than defining it. Compliance is about meeting standards or policies, not about discovering weaknesses in the system. So the objective is identifying weaknesses.

The main idea is to uncover weaknesses in a system’s security controls. A vulnerability is a flaw, misconfiguration, or gap that could be exploited by an attacker. The purpose of vulnerability assessment is to identify these weaknesses so they can be prioritized and fixed before they are exploited.

A threat is something that could exploit a vulnerability, but the assessment’s goal isn’t to identify threats themselves. Risk combines both the likelihood of an exploit and its potential impact, and vulnerability assessment informs that process rather than defining it. Compliance is about meeting standards or policies, not about discovering weaknesses in the system.

So the objective is identifying weaknesses.