What is the difference between an attack vector and an attack surface?

The correct answer is B. The attack vector targets security weaknesses, and the attack surface is where an adversary. An attack vector is the method or path an adversary uses to exploit a weakness, while the attack surface is the collection of all points in a system where those weaknesses exist and where an attacker can attempt entry.

Submitted by saadiq_pk· Mar 6, 2026Security Concepts

Question

Options

AAttack vectors are flaws in configuration, and the attack surface is the system or software that has
BThe attack vector targets security weaknesses, and the attack surface is where an adversary
CThe attack surface is tactics, techniques, and procedures used by the threat actor, and the attack
DThe attack surface defines the number of existing vulnerabilities available, and the attack vector

How the community answered

(35 responses)

A
3% (1)
B
86% (30)
C
9% (3)
D
3% (1)

Explanation

An attack vector is the method or path an adversary uses to exploit a weakness, while the attack surface is the collection of all points in a system where those weaknesses exist and where an attacker can attempt entry.

Topics

#attack vector#attack surface#threat modeling

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice