CompTIA Security+ Exam Prep

Answer: C - Rain is not a threat agent. Malware can exploit the lack of antivirus software and can cause virus infection. Hackers can exploit services running on a server to reach confidential information. Users can exploit mal-configured parameters in the operating system that leads to a system malfunction. Equipment fires or arson can cause facility and computer damage.

Employees (through lack of training or standards enforcement) and auditing may result in sharing mission-critical information and the altering of data inputs and outputs from data processing applications. Lax access control mechanisms can be exploited by a contractor, which can lead to the stealing of trade secrets. Poorly-written applications and stringent firewall settings can result in a buffer overflow by an attacker. Intruders (due to a lack of a security guard) can lead to breaking windows and stealing of devices.