What is the difference between an attack vector and attack surface?

Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?

In a SOC environment, what is a vulnerability management metric?

Refer to the exhibit.

This request was sent to a web application server driven by a database. Which type of web server attack is represented?

An intruder attempted malicious activity and exchanged emails with a user and received corporate information, including email distribution lists. The intruder asked the user to engage with a link in an email. When the fink launched, it infected machines and the intruder was able to access the corporate network.
Which testing method did the intruder use?