Examkin

Soru

Zorluk: OrtaThreat Actors, Attributes, and Attack Vectors

A security operations team at a healthcare research organization is analyzing a long-term intrusion targeting proprietary patient genetic databases. The adversary demonstrated advanced capabilities by leveraging custom zero-day exploits, operating stealthily across multiple months without deploying ransomware or causing service disruptions. Which of the following attributes and motivations are most characteristic of this specific threat actor profile? (Select TWO.)

  1. High technical sophistication utilizing customized evasion tools and zero-day capabilitiesCevap
  2. Geopolitical espionage motivation aimed at long-term intellectual property theftCevap
  3. C
    Short-term financial extortion driven by immediate ransomware monetization
  4. D
    Ideologically motivated disruption intended to publicly embarrass the organization

Cevap

The correct threat actor characteristics are high technical sophistication utilizing customized evasion tools and zero-day capabilities, along with a geopolitical espionage motivation aimed at long-term intellectual property theft.
The scenario describes an Advanced Persistent Threat (APT) profile characterized by high technical sophistication (zero-day exploits, stealthy persistence) and state-sponsored or geopolitical motivation focused on long-term intelligence gathering and intellectual property theft.

Adım Adım Çözüm

1
Analyze the adversary's actions and tactics described in the scenario.
The adversary maintained multi-month persistence using custom zero-day exploits while avoiding noise or disruption.
Technical capabilities such as custom zero-day exploitation indicate high sophistication and significant funding typical of advanced persistent threat (APT) groups.
2
Evaluate the underlying motivation based on targeted assets and behavior.
The target was proprietary genetic data, collected covertly without extortion or vandalism.
Covert exfiltration of proprietary research aligns with nation-state espionage and strategic data theft rather than financial crime or hacktivism.

Anahtar Kavram

Threat Actor Attributes and Intent
Bu soruyu puanla

Konular

Threat Actors, Attributes, and Attack Vectors

Bu konudan daha fazla soru