Examkin

Question

Difficulty: MediumThreat Actors, Attributes, and Attack Vectors

Match each threat actor profile to the primary attribute combination and attack strategy that most accurately characterizes their operations.

  • Nation-state adversaryExtensive funding and high sophistication, motivated by geopolitical intelligence gathering via stealthy supply chain compromises and advanced persistent threats.
  • Hacktivist collectiveModerate sophistication and low funding, motivated by social or political causes via high-visibility web defacements and distributed denial-of-service (DDoS) attacks.
  • Disgruntled insiderVarying sophistication with direct legitimate credentials, motivated by personal grievances or financial gain via unauthorized internal data exfiltration.
  • Organized crime syndicateSubstantial financial backing and high technical capability, motivated primarily by profit through widespread double-extortion ransomware campaigns.

Answer

Nation-state adversaries correspond to extensive funding, high sophistication, and geopolitical espionage goals. Hacktivist collectives match ideological motivation with public-facing attacks like DDoS and defacement. Disgruntled insiders possess internal credentials and act out of grievance or financial incentive. Organized crime syndicates deploy profit-driven ransomware operations with high capabilities.
Each threat actor type possesses distinct attributes: nation-states focus on strategic state-sponsored espionage with custom vectors; hacktivists aim for public awareness using disruption tactics; insiders utilize legitimate credentials for malicious exfiltration; and organized crime syndicates operate as sophisticated financial enterprises.

Step-by-Step Solution

1
Analyze the motivation, funding, and sophistication of nation-state actors.
Identified geopolitical espionage, high funding, stealth, and supply chain vectors.
Nation-states focus on long-term intelligence gathering backed by state resources.
2
Evaluate the primary drivers and vectors of hacktivist groups.
Matched to political/social ideology and high-visibility disruption tactics like DDoS.
Hacktivists seek publicity for their cause rather than covert intelligence or monetary gain.
3
Differentiate insider threats from external actors.
Matched to internal access capabilities and grievance-driven exfiltration.
Insiders exploit preexisting legitimate privileges to bypass perimeter controls.
4
Identify the core attributes of organized cybercrime syndicates.
Matched to monetary profit targets and ransomware extortion models.
Organized crime prioritizes financial returns over political or strategic objectives.

Key Concept

Threat Actor Profiling and Attributes
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic