Which two options are attack vectors of the threat-centric defense? (Choose two)

Voicemail is a telephony-based communication channel and is not identified as an attack vector within Cisco's threat-centric defense framework, which focuses on IP-connected digital attack surfaces.

Backups are a data resilience and recovery mechanism and do not represent a network-facing active attack vector addressed by threat-centric defense strategies.

Mobile devices are a defined attack vector in threat-centric defense because smartphones and tablets access sensitive corporate resources and are targeted by mobile malware, phishing, and unauthorized access attempts, requiring solutions like Cisco Secure Endpoint or Umbrella to extend protection to these platforms.

Video surveillance systems, while potentially vulnerable IoT endpoints, are not designated as a specific attack vector within Cisco's threat-centric defense model as defined in this curriculum.

Cloud applications are an attack vector because corporate data is increasingly processed in SaaS and IaaS environments, making them targets for credential theft, misconfiguration exploitation, and data exfiltration - requiring cloud security controls such as CASB or Cisco Umbrella SIG.