Which term refers to an entity that carries out a threat?

Which term refers to an entity that carries out a threat?

• A. Threat Agent
• B. Threat
• C. Vulnerability
• D. Benchmark

Answer: (A)

The main idea here is recognizing who actually performs the harmful action. A threat is the potential harm or adverse event that could occur, while the threat agent is the actor who would carry out that threat. In risk terms, the threat agent is the person or entity responsible for initiating the attack or wrongdoing. A vulnerability is the weakness that could be exploited to realize the threat, and a benchmark is a standard used for measurement or comparison of security performance. So the entity that carries out the threat is the threat agent. For example, a cybercriminal who attempts to exfiltrate data is the threat agent—the one taking action to realize the threat; the vulnerability might be weak authentication, and the benchmark would be a security standard used to assess defenses.

The main idea here is recognizing who actually performs the harmful action. A threat is the potential harm or adverse event that could occur, while the threat agent is the actor who would carry out that threat. In risk terms, the threat agent is the person or entity responsible for initiating the attack or wrongdoing. A vulnerability is the weakness that could be exploited to realize the threat, and a benchmark is a standard used for measurement or comparison of security performance. So the entity that carries out the threat is the threat agent. For example, a cybercriminal who attempts to exfiltrate data is the threat agent—the one taking action to realize the threat; the vulnerability might be weak authentication, and the benchmark would be a security standard used to assess defenses.