| Exam 200-201 | Question id=5983 | Security concepts |
What is the difference between an attack vector and attack surface?
| A. |
An attack surface identifies vulnerabilities that require user input or validation; and an attack vector identifies vulnerabilities that are independent of user actions. | |
| B. |
An attack vector identifies components that can be exploited; and an attack surface identifies the potential path an attack can take to penetrate the network. | |
| C. |
An attack surface recognizes which network parts are vulnerable to an attack; and an attack vector identifies which attacks are possible with these vulnerabilities. | |
| D. |
An attack vector identifies the potential outcomes of an attack; and an attack surface launches an attack using several methods against the identified vulnerabilities. |