Asset vulnerability is determined using a number of criteria including quantity, effectiveness of countermeasures and ______.
[ ] Category
[ ] Effect
[ ] Quality
[ ] Duration
a. Category
b. Effect
c. Quality
d. Duration