Absolute Free 200-201 Exam Practice for Comprehensive Preparation 

A vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

A threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

A vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

A threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.