Which term describes the degree to which a threat actor has access privileges before an attack, distinguishing between actors with no standing privileges and those with some access?

Which term describes the degree to which a threat actor has access privileges before an attack, distinguishing between actors with no standing privileges and those with some access?

• A. Access level
• B. Privilege escalation
• C. Attack surface
• D. Internal/external

Answer: (D)

Understanding the starting position of an attacker is key here: are they coming from inside the organization or from outside? This is what the term internal/external captures. An internal actor already has some standing privileges—credentials, trusted access, or insider permissions—before any attack begins. An external actor typically has little or no privileged access and must first find a way in or escalate privileges once inside. This classification helps security teams assess risk and model attacker paths based on where the attack originates. Other terms describe different ideas. Access level focuses on the privileges of a particular account, not where the attacker originates. Privilege escalation is the act of gaining higher privileges during an intrusion. Attack surface refers to how many potential entry points exist in a system.

Understanding the starting position of an attacker is key here: are they coming from inside the organization or from outside? This is what the term internal/external captures. An internal actor already has some standing privileges—credentials, trusted access, or insider permissions—before any attack begins. An external actor typically has little or no privileged access and must first find a way in or escalate privileges once inside. This classification helps security teams assess risk and model attacker paths based on where the attack originates.

Other terms describe different ideas. Access level focuses on the privileges of a particular account, not where the attacker originates. Privilege escalation is the act of gaining higher privileges during an intrusion. Attack surface refers to how many potential entry points exist in a system.