Which term describes the path a threat actor uses to execute a data exfiltration, service disruption, or disinformation attack?

Which term describes the path a threat actor uses to execute a data exfiltration, service disruption, or disinformation attack?

• A. Threat vector
• B. Vulnerable software
• C. Unsupported systems
• D. Unsecure network

Answer: (A)

A threat vector is the route or method a threat actor uses to reach a target and carry out an attack, such as exfiltrating data, disrupting services, or spreading disinformation. It’s the path from entry to impact—the way the attacker travels through defenses to achieve their goal. Understanding the threat vector helps defenders anticipate how an attack could unfold and put controls in place along those paths, like email filtering and secure access for phishing, patching and hardening software to close entry points, and monitoring for unusual activity on exposed services. The other terms point to weaknesses or conditions rather than the method of attack: vulnerable software is a flaw that could be exploited, unsupported systems indicate lacking vendor updates, and an unsecure network describes a general insecure state rather than the specific path an attacker would take.

A threat vector is the route or method a threat actor uses to reach a target and carry out an attack, such as exfiltrating data, disrupting services, or spreading disinformation. It’s the path from entry to impact—the way the attacker travels through defenses to achieve their goal. Understanding the threat vector helps defenders anticipate how an attack could unfold and put controls in place along those paths, like email filtering and secure access for phishing, patching and hardening software to close entry points, and monitoring for unusual activity on exposed services. The other terms point to weaknesses or conditions rather than the method of attack: vulnerable software is a flaw that could be exploited, unsupported systems indicate lacking vendor updates, and an unsecure network describes a general insecure state rather than the specific path an attacker would take.