Methods and things used to exploit a vulnerability.

Methods and things used to exploit a vulnerability.

• A. Threat
• B. Policy
• C. Threat agent
• D. Procedure

Answer: (C)

This item tests understanding of who or what carries out an exploit, including the tools and techniques used. A threat agent is the entity that could carry out a threat and brings with it the methods, tools, and capabilities needed to exploit a vulnerability. In other words, it’s the attacker along with the means they use to compromise the system. A threat, by contrast, is the potential for harm, not the specific actor or their toolkit. A policy is a rule governing behavior, and a procedure is a set of steps to perform a task; neither describes the attacker’s identity or the tools used to exploit a vulnerability. So the most fitting concept for “methods and things used to exploit a vulnerability” is the threat agent.

This item tests understanding of who or what carries out an exploit, including the tools and techniques used. A threat agent is the entity that could carry out a threat and brings with it the methods, tools, and capabilities needed to exploit a vulnerability. In other words, it’s the attacker along with the means they use to compromise the system. A threat, by contrast, is the potential for harm, not the specific actor or their toolkit. A policy is a rule governing behavior, and a procedure is a set of steps to perform a task; neither describes the attacker’s identity or the tools used to exploit a vulnerability. So the most fitting concept for “methods and things used to exploit a vulnerability” is the threat agent.