Which metric is used to capture the level of access needed to launch a successful attack?

Which metric is used to capture the level of access needed to launch a successful attack?

A. privileges required B. user interaction C. attack complexity D. attack vector