RSM Interview Question

Vulnerability risk and threat differences?