Which term denotes the entity that performs the exploitation of a vulnerability via methods and tools?

Which term denotes the entity that performs the exploitation of a vulnerability via methods and tools?

• A. Threat
• B. Policy
• C. Threat agent
• D. Standard

Answer: (C)

In risk terminology, a threat is the potential for harm, while the threat agent is the actor who actually exploits a vulnerability using specific methods and tools. The question asks for the term that denotes the entity performing the exploitation, which is the threat agent. This is the entity—a hacker, attacker, or other malicious actor—that carries out the attack by applying techniques, tools, and exploits to take advantage of a vulnerability. A threat describes what could happen, not who does it. Policies and standards are governance documents that define rules and guidelines, not the actor carrying out the attack.