Refers to whether the threat actor cares if they get caught.

Refers to whether the threat actor cares if they get caught.

• A. Objective
• B. Baseline
• C. Resources
• D. Visibility

Answer: (D)

This question tests how much a threat actor cares about being detected, which is captured by the concept of visibility. Visibility relates to how observable or detectable an attacker’s actions are to defenders and investigators. When a threat actor cares about getting caught, they’ll try to minimize their footprint, avoid leaving traces, and use stealthy techniques to stay hidden. That focus on how detectable the attack is is exactly what visibility describes. The other terms describe what the attacker wants to achieve (objective), the normal state or standard for comparison (baseline), or what assets they have to carry out the attack (resources), none of which directly address detection risk.

This question tests how much a threat actor cares about being detected, which is captured by the concept of visibility. Visibility relates to how observable or detectable an attacker’s actions are to defenders and investigators. When a threat actor cares about getting caught, they’ll try to minimize their footprint, avoid leaving traces, and use stealthy techniques to stay hidden. That focus on how detectable the attack is is exactly what visibility describes. The other terms describe what the attacker wants to achieve (objective), the normal state or standard for comparison (baseline), or what assets they have to carry out the attack (resources), none of which directly address detection risk.