Core4ce interview question

What is the difference between a threat and a risk?