Which term describes the intended end state an attacker aims to achieve?

Which term describes the intended end state an attacker aims to achieve?

• A. Outcome
• B. Visibility
• C. Objective
• D. Metrics

Answer: (C)

An attacker’s objective is the goal they are trying to reach—the intended end state they want to achieve through their actions. It’s the specific target outcome they plan, such as stealing data, gaining unauthorized access, or taking a service offline. This focuses on the purpose behind the actions. The other terms describe different ideas. An outcome is what happens as a result of actions, not the attacker’s planned target state. Visibility refers to how detectable or observable the activity is to defenders. Metrics are measurements used to assess performance or success, not the attacker’s goal itself. In security planning, identifying the attacker’s objective helps prioritize defenses around the most valuable end states, guiding how you protect confidentiality, integrity, and availability.

An attacker’s objective is the goal they are trying to reach—the intended end state they want to achieve through their actions. It’s the specific target outcome they plan, such as stealing data, gaining unauthorized access, or taking a service offline. This focuses on the purpose behind the actions.

The other terms describe different ideas. An outcome is what happens as a result of actions, not the attacker’s planned target state. Visibility refers to how detectable or observable the activity is to defenders. Metrics are measurements used to assess performance or success, not the attacker’s goal itself. In security planning, identifying the attacker’s objective helps prioritize defenses around the most valuable end states, guiding how you protect confidentiality, integrity, and availability.