What Is Attack Surface?
The total sum of all points where an unauthorized user could attempt to enter or extract data from a system, including software, hardware, and human vectors.
Attack Surface across 2 exams
Attack Surface appears on the following exams. Each defines it in the context candidates are tested on:
- Security+
- The total sum of all points where an unauthorized user could attempt to enter or extract data from a system, including software, hardware, and human vectors.
- CySA+
- The complete set of points — systems, services, accounts, interfaces — through which an unauthorized party could attempt to gain access to an environment.