State of Missouri interview question

What is the difference between a vulnerability, a threat, and a risk?