Public Service Commission (PSC)2082 BSQuestion 12 of 16
Explain the difference between a threat and an attack in the context of computer security. Also, explain how the principles of Confidentiality, Integrity and Availability (CIA) can be implemented within an organization to mitigate security risks.
5 marks
Question source
- Exam year
- 2082 BS / 2025 AD
- Level
- Level 5
- Paper
- Technical – Subjective
- Section
- Section B: Security & Governance (50 Marks)
Model answer
Threat is potential danger; Attack is actual breach attempt. CIA Triad safeguards data security.