A threat actor is ...:

The correct answer is C. ... an individual or a group posing to exploit a vulnerability to thwart protection efforts. A threat actor (also called a malicious actor or adversary) is an individual or group that seeks to exploit vulnerabilities in order to compromise security controls. The other choices describe related but distinct concepts: a 'means to gain access' describes an attack vector or…

Security Principles

Question

Options

A... a means to gains access to systems
B... an exploitable weakness or flaw in a system or component
C... an individual or a group posing to exploit a vulnerability to thwart protection efforts
D... an event that can negatively impact the organization

How the community answered

(43 responses)

A
5% (2)
C
93% (40)
D
2% (1)

Explanation

A threat actor (also called a malicious actor or adversary) is an individual or group that seeks to exploit vulnerabilities in order to compromise security controls. The other choices describe related but distinct concepts: a 'means to gain access' describes an attack vector or threat vector; an 'exploitable weakness or flaw' is the definition of a vulnerability; and 'an event that can negatively impact the organization' describes a threat or risk event. Understanding these distinctions is foundational to security frameworks like (ISC)² CC and CISSP.

Topics

#Threat actors#Cyber threats#Security concepts#Cybersecurity fundamentals

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice