Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 294

How does an attack surface differ from an attack vector?

Answer options

• A. An attack vector recognizes the potential outcomes of an attack, and the attack surface is choosing a method of an attack.
• B. An attack vector matches components that can be exploited, and an attack surface classifies the potential path for exploitation.
• C. An attack surface mitigates external vulnerabilities, and an attack vector identifies mitigation techniques and possible workarounds.
• D. An attack surface identifies vulnerable parts for an attack, and an attack vector specifies which attacks are feasible to those parts.

Correct answer: D

Explanation

The correct answer, D, accurately describes that the attack surface focuses on identifying the vulnerable components while the attack vector outlines the specific attacks that can be executed against those vulnerabilities. The other options misinterpret the roles of attack vectors and surfaces, mixing up their definitions and functions.