Examkin

Question

Difficulty: MediumThreat Actors, Attributes, and Attack Vectors

During a routine post-incident investigation at a commercial financial auditing firm, security engineers discover an intrusion originating from a compromised third-party software build pipeline. The attack exhibited high technical sophistication, stealthy persistence across multiple network segments, and extensive resource backing, with an operational focus on long-term corporate intelligence gathering rather than immediate financial extortion. Which threat actor profile best aligns with the operational attributes and attack vector observed in this scenario?

  1. State-sponsored threat groupAnswer
  2. B
    Ideologically motivated activist group
  3. C
    Unapproved internal system deployment
  4. D
    Novice opportunistic attacker

Answer

State-sponsored threat group
State-sponsored threat groups have the high technical capability, funding, and strategic intent necessary to execute complex supply chain compromises for long-term cyber espionage.

Step-by-Step Solution

1
Analyze the attack vector identified in the scenario
The intrusion entered through a third-party software build pipeline (supply chain vector).
Identifying the vector helps narrow down the sophistication and positioning required by the adversary.
2
Evaluate adversary attributes and motivation
High technical sophistication, stealthy persistence, significant financial backing, and intelligence-gathering motivation.
These attributes align directly with advanced persistence capabilities typical of nation-state actors.
3
Match attributes to threat actor classification
State-sponsored threat group is the only profile matching high sophistication, espionage intent, and supply chain attack capabilities.
Other threat actor profiles lack either the required sophistication, resources, or strategic motivation.

Key Concept

Threat Actor Attributes and Attack Vectors
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic