Fusion Practices interview question

How does vulnerability differ from threats?