210-250 · Question #102
Which statement about an attack surface is true?
The correct answer is A. It is the sum of all paths for data/commands into and out of the application. The attack surface is the total collection of entry and exit points through which an attacker can interact with a system or application.
Question
Which statement about an attack surface is true?
Exhibit
Options
- AIt is the sum of all paths for data/commands into and out of the application
- BIt is an exploitable weakness in a system or design
- CIt is the individual who perform an attack.
- DIt is any potential danger to an asset.
How the community answered
(25 responses)- A92% (23)
- B4% (1)
- D4% (1)
Why each option
The attack surface is the total collection of entry and exit points through which an attacker can interact with a system or application.
The attack surface is defined as the sum of all paths - including APIs, user interfaces, data inputs, and network endpoints - through which data or commands can enter or leave an application. This concept is used in threat modeling to identify and reduce exposure. Minimizing the attack surface is a core security design principle recognized by OWASP and industry standards.
This describes a vulnerability, which is a specific exploitable weakness in a system or design, not the broader concept of the attack surface.
This describes a threat actor, the individual or group who carries out an attack, which is a people-centric concept unrelated to attack surface.
This describes a threat, which is any potential danger to an asset, a broader risk concept distinct from the attack surface.
Concept tested: Definition of attack surface in cybersecurity
Source: https://owasp.org/www-community/Attack_Surface_Analysis_Cheat_Sheet
Topics
Community Discussion
No community discussion yet for this question.