Adam is evaluating the security of a web server before it goes live. He believes that an issue in the code allows an SQL injection attack against the server. What term describes the issue that Adam discovered? A. threat b. vulnerability c. risk d. impact

Answered on

The term that describes the issue Adam discovered is:

B. Vulnerability

In the context of information security:

  • A threat is a potential danger or unwanted event that may exploit a vulnerability.
  • A vulnerability is a weakness in a system that could be exploited by a threat.
  • A risk is the likelihood of a threat exploiting a vulnerability, resulting in harm.
  • Impact refers to the extent of the harm or damage caused by an incident.

So, in this case, if Adam believes that there is an issue in the code that could allow an SQL injection attack, he is identifying a vulnerability in the system. The risk would depend on the likelihood of that vulnerability being exploited and the potential impact of a successful SQL injection attack. The fix would involve addressing and remedying the identified vulnerability to prevent exploitation.

Related Questions