What is the difference between an attack vector and attack surface?

The correct answer is C. An attack surface recognizes which network parts are vulnerable to an attack; and an attack. The attack surface of a software environment is the sum of the different points (for "attack vectors") where an unauthorized user (the "attacker") can try to enter data to or extract data from an environment. Keeping the attack surface as small as possible is a basic security…

Submitted by akirajp· Mar 6, 2026Security Concepts

Question

Options

AAn attack surface identifies vulnerabilities that require user input or validation; and an attack
BAn attack vector identifies components that can be exploited; and an attack surface identifies
CAn attack surface recognizes which network parts are vulnerable to an attack; and an attack
DAn attack vector identifies the potential outcomes of an attack; and an attack surface launches

How the community answered

(39 responses)

A
5% (2)
B
3% (1)
C
90% (35)
D
3% (1)

Explanation

The attack surface of a software environment is the sum of the different points (for "attack vectors") where an unauthorized user (the "attacker") can try to enter data to or extract data from an environment. Keeping the attack surface as small as possible is a basic security measure. https://en.wikipedia.org/wiki/Attack_surface In computer security, an attack vector is a specific path, method, or scenario that can be exploited to break into an IT system, thus compromising its security. The term was derived from the corresponding notion of vector in biology. An attack vector may be exploited manually, automatically, or through a combination of manual and automatic activity. https://en.wikipedia.org/wiki/Attack_vector

Topics

#attack vector#attack surface#vulnerability assessment#threat landscape

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice