Refers to how the threat operates.

Refers to how the threat operates.

• A. Visibility
• B. Limits
• C. Monitoring Control
• D. Metrics

Answer: (B)

Understanding how a threat operates focuses on its limits—the boundaries of what it can do, which resources it can access, and how far its actions can spread within the system. Describing a threat’s mode of operation is about its capabilities and constraints, so the term that best fits is the limits that define what steps the threat can take and where it can move. Visibility deals with whether defenders can detect the threat, not its actions. Monitoring control is about detection and response mechanisms, not the threat’s behavior. Metrics are measurements used to assess performance, not how the threat itself acts. For example, a attacker’s ability to move through a network is governed by segmentation and access controls, which establish the limits of what they can reach.

Understanding how a threat operates focuses on its limits—the boundaries of what it can do, which resources it can access, and how far its actions can spread within the system. Describing a threat’s mode of operation is about its capabilities and constraints, so the term that best fits is the limits that define what steps the threat can take and where it can move. Visibility deals with whether defenders can detect the threat, not its actions. Monitoring control is about detection and response mechanisms, not the threat’s behavior. Metrics are measurements used to assess performance, not how the threat itself acts. For example, a attacker’s ability to move through a network is governed by segmentation and access controls, which establish the limits of what they can reach.