A security analyst is studying Risk and policy. Which statement about Risk is correct?

Correct Answer: C

combines the likelihood of a threat exploiting a vulnerability with the resulting impact

This is correct because Risk combines the likelihood of a threat exploiting a vulnerability with the resulting impact.