How does a vulnerability differ from an exploit?
Different organizations use different terminology to describe common elements of an information security manager's job. Interviewers will ask you about terminology to determine your understanding and use of it. This is a question that may not have a right or wrong answer. However, your answer will allow the interviewer to determine whether the terminology you use is common to their organization or if you will need to be reoriented to ensure you are communicating accurately and effectively across the organization.
When answering a question about terminology, answer honestly based on your current use of the terms. As long as you're confident that your understanding of the terminology is accurate, your answer will be considered correct. If the organization uses the terminology differently, the interviewer will explain this and probably ask for your agreement. They will then use this information to determine what onboarding activities are required once you are hired.
"I use the term vulnerability to describe a potential issue related to information security that needs to be addressed or monitored. An exploit is an active issue that needs to be resolved immediately. Once an exploit is identified and resolved, it may become a vulnerability that needs to be addressed more globally to prevent a recurrence."
