Answer:
Vulerability and Risk
Explanation:
Uncertainity is the vulnerability of an outcome and is not quantifiable whereas the risk is that the firm will be affected by an outcome which is quantifiable. So here the vulnerability of a system is its misconfiguration that has a loophole which would affect the firm and the hacker can hack these systems easily. Whereas the risk that the hacker will exploit the misconfiguration opportunity, such a hack using system misconfiguration is quantifiable and can be measured from past data and system configuration and security measures.