A security auditor for a large corporation conducts a compliance audit in accordance with their company's policies. They are now evaluating the likelihood and impact (or outcome) of a threat actor exploiting a vulnerability. What is the term for this? *

1- Attack vector

2- Threat

3- Vulnerability

4- Risk