Examkin

Question

Difficulty: HardThreat Actors, Attributes, and Attack Vectors

A critical infrastructure energy provider discovers an undetected intruder within its operational technology (OT) network. Investigation reveals the threat group utilized undisclosed zero-day exploits targeting proprietary industrial controllers, maintained covert persistence for over two years without executing ransomware or financial extortion, and possessed multi-disciplinary capability across hardware and software engineering. Which TWO of the following threat actor attributes and classifications best describe this threat group?

  1. Nation-state actor / Advanced Persistent Threat (APT) classificationAnswer
  2. High sophistication with deep resource funding and capabilityAnswer
  3. C
    Hacktivist organization driven by political ideology and low-complexity public denial-of-service tactics
  4. D
    Unskilled insider actor exploiting unpatched vulnerabilities with off-the-shelf automated scripts

Answer

The correct classifications and attributes for this threat group are Nation-state / Advanced Persistent Threat (APT) classification and High sophistication with deep resource funding and capability.
Nation-state adversaries and Advanced Persistent Threats (APTs) are characterized by extreme sophistication, high funding, access to zero-day vulnerabilities, and strategic long-term objectives such as prepositioning within critical infrastructure networks without triggering extortion alerts.

Step-by-Step Solution

1
Analyze the incident details provided in the scenario
Identified key indicators: custom zero-day exploits on proprietary OT hardware, stealthy 2-year persistence, no financial extortion demands, highly strategic target.
Threat actor profiling relies on evaluating observed tactics, techniques, procedures (TTPs), resource levels, and intent.
2
Evaluate actor motivation and capability profiles against the scenario evidence
The profile matches nation-state actors/APTs who possess massive resource backing and focus on long-term cyber espionage or strategic operational positioning against critical infrastructure.
Organized crime or hacktivists seek monetary gain or public notoriety, whereas nation-states prioritize stealth, persistence, and complex capability development.
3
Select the two matching attributes from the available choices
Confirmed Nation-state / APT actor classification and High sophistication with deep resource funding.
Both options accurately describe an adversary capable of zero-day development and prolonged covert operation.

Key Concept

Threat Actor Attributes, Sophistication, and Motivations
Estimated Time:2m 0s
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic