An attacker leaves a USB stick containing malicious software in the foyer of a building occupied by an information security research organisation. An employee of the organisation picks up the USB and, out of curiosity, accesses the contents of the USB. In this situation, which one of the following statements best describes the role played by the employee who accessed the contents of the USB?

Group of answer choices

An active attacker

A passive attacker

A threat to the information assets

A vulnerability in the information system