ISACA IT Risk Fundamentals Practice Test

Attack vector describes the path or route an adversary uses to reach and compromise a target asset. It focuses on the method and channel of entry—the actual route the attacker takes, such as a phishing email that tricks someone into revealing credentials, a malware delivery via a malicious download, or exploiting a software vulnerability exposed to the internet. Understanding attack vectors helps you map where defenses should be placed and how to block or monitor those entry routes, for example through email security, patching, multi-factor authentication, and network segmentation.

Asset Value refers to how important or valuable an asset is, not how an attacker would access it. Asset Inventory is simply a list of assets and their characteristics. Availability Risk concerns the possibility that a service or system becomes unavailable, rather than the route an attacker would use to reach an asset.