In identifying threat sources, which aspects are examined?

• A. Capability, intent, and targeting
• B. Information sources
• C. Vulnerabilities
• D. Impacts

Answer: (A)

When identifying threat sources, you assess three key attributes of the actor: capability, intent, and targeting. Capability covers what the threat source can actually do—the tools, resources, and skills at their disposal. Intent looks at their willingness and goals to carry out a harmful action. Targeting focuses on who or what they plan to attack, which helps gauge relevance and potential impact. The other options refer to how you gather data (information sources), where weaknesses lie in the system (vulnerabilities), or the consequences if a threat is realized (impacts), rather than describing the threat source itself.