Examkin

Soru

Zorluk: ZorThreat Actors, Attributes, and Attack Vectors

During a comprehensive security audit following a series of distinct security events across a global enterprise, threat intelligence analysts are categorizing observed activities by threat actor type, attributes, and primary attack vectors. Match each threat actor profile on the left with the enterprise scenario on the right that best exemplifies its characteristic capabilities, motivation, and attack vector.

  • Organized Crime SyndicateDeployment of double-extortion ransomware and Ransomware-as-a-Service (RaaS) payloads targeting central file servers to demand cryptocurrency.
  • Malicious InsiderLarge-scale exfiltration of proprietary design files using legitimate remote access credentials outside business hours following a passed-over promotion.
  • Shadow IT / Unintentional InsiderUnauthorized transmission of confidential customer databases into an unvetted public cloud AI service by analytics staff seeking to automate report generation.
  • Nation-State Advanced Persistent Threat (APT)Use of custom zero-day exploits and Living-off-the-Land (LotL) binaries to maintain undetected, long-term persistence within defense supply chain infrastructure.

Cevap

Organized Crime Syndicate matches the double-extortion ransomware deployment; Malicious Insider matches the exfiltration of proprietary files using legitimate credentials following a passed-over promotion; Shadow IT / Unintentional Insider matches the unauthorized transmission of databases into an unvetted public cloud AI service; Nation-State APT matches the custom zero-day exploits and Living-off-the-Land persistence.
The correct pairings accurately map threat actor attributes to realistic attack vectors: Organized Crime Syndicate matches the financial extortion ransomware scenario; Malicious Insider matches authorized access abuse driven by internal grievance; Shadow IT / Unintentional Insider matches unsanctioned cloud tool adoption for business tasks; and Nation-State APT matches stealthy, highly sophisticated zero-day and LotL techniques for strategic persistence.

Adım Adım Çözüm

1
Analyze threat actor motivations and sophistication levels
Identify financial intent for criminal syndicates, internal access/grievance for insiders, convenience/lack of policy awareness for unintentional actors, and stealth/strategic advantage for nation-states.
Threat actor attributes directly influence their choice of targets, tools, and vectors.
2
Evaluate attack vectors and operational indicators for each scenario
Ransomware and RaaS correlate to organized crime; authorized access abuse correlates to malicious insiders; unsanctioned SaaS usage correlates to shadow IT; zero-days and LotL tactics correlate to nation-state APTs.
Mapping indicators to actor capabilities allows precise classification during threat analysis.
3
Match each actor to its corresponding scenario based on intent, capability, and vector
Pair left_1 with right_2, left_2 with right_1, left_3 with right_3, and left_4 with right_4.
Each pairing represents the defining characteristics of that threat actor profile according to security domain standards.

Anahtar Kavram

Threat Actor Attributes, Motivations, and Attack Vectors
Bu soruyu puanla

Konular

Threat Actors, Attributes, and Attack Vectors

Bu konudan daha fazla soru