Which statement best defines a threat as used in the material?

• A. A threat is something that 'wants' to cause harm to a system
• B. A threat is a vulnerability that can be exploited
• C. A threat is a safeguard that prevents harm
• D. A threat is the recovery plan after an incident

Answer: (A)

In this material, threat is described as something that wants to cause harm to a system. That focus on intent to cause harm is why this option is the best fit: it captures the idea that a threat represents the potential source of harm driven by intent or motive, not just a weakness or a protective measure. It’s not a vulnerability (the weakness that could be exploited), not a safeguard (a control that prevents harm), and not the recovery plan (the steps after an incident). For example, a malware program designed to steal data is a threat because it has the intention to cause harm; the vulnerability would be the flaw that allows exploitation, the safeguard would be defenses like patches or encryption, and the recovery plan would cover how to restore systems after an incident.