iSACA Cybersecurity Fundamentals Certification Practice Exam

Which is NOT a component of attack attributes?

1. Exploit

2. Payload

3. Incident response

4. Vulnerability

The correct answer is: Incident response

The reason "incident response" is identified as not a component of attack attributes is due to the nature of its focus. Attack attributes typically refer to intrinsic characteristics that describe how an attack is executed and its components, which include exploit, payload, and vulnerability. An exploit refers to the method or technique used to take advantage of a vulnerability in a system. The payload is the actual part of the attack that carries out the intended malicious activity, such as delivering malware or executing unauthorized commands. A vulnerability is a flaw or weakness in a system that can be exploited to gain unauthorized access or cause harm. In contrast, incident response is a process that occurs after an attack has been identified and focuses on managing and mitigating the effects of that attack. It involves steps taken to respond to and recover from incidents, making it distinct from the characteristics that describe the attack itself.