Which threat actor characteristic is most commonly associated with organized crime groups?

Financial motivation and high level of organization

Revenge-driven actions by disgruntled employees

State-sponsored espionage and intelligence gathering

Ideological motivation and desire for social change

A security analyst is mapping an adversary's actions to MITRE ATT&CK. The adversary is observed using a legitimate remote desktop application to access a workstation and then transferring data to an external server. Which ATT&CK technique is the analyst MOST likely documenting for the data transfer?

T1041 Exfiltration Over C2 Channel

T1048 Exfiltration Over Alternative Protocol

T1567 Exfiltration Over Web Service

An attacker sends a specially crafted email to an employee, impersonating the CEO and requesting an urgent wire transfer. Which attack pattern does this describe?

Business Email Compromise (BEC)

CompTIASecurityX (CASP+)

Domain 1Objective 8

Threat Modeling CAS-005 Practice Questions (Page 3)

Part of the Governance, risk, and compliance domain, which accounts for 20% of the CAS-005 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~13–22 in this domain), expect 1–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

5concepts

20%of the exam

Questions 11–15

11foundation · easy
In the STRIDE threat model, which threat category is concerned with an attacker being able to modify data or code?
Select an answer first
12foundation · easy
Which threat actor characteristic is most commonly associated with organized crime groups?
Select an answer first
13foundation · easy
A security team is using CAPEC to understand how an attacker might exploit a buffer overflow vulnerability. Which CAPEC category would they most likely consult?
Select an answer first
14application · medium
A security analyst is mapping an adversary's actions to MITRE ATT&CK. The adversary is observed using a legitimate remote desktop application to access a workstation and then transferring data to an external server. Which ATT&CK technique is the analyst MOST likely documenting for the data transfer?
Select an answer first
15foundation · easy
An attacker sends a specially crafted email to an employee, impersonating the CEO and requesting an urgent wire transfer. Which attack pattern does this describe?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CAS-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CAS-005” is a trademark of its owner, used for identification only.

Threat Modeling CAS-005 Practice Questions (Page 3)

Questions 11–15

In the STRIDE threat model, which threat category is concerned with an attacker being able to modify data or code?

Which threat actor characteristic is most commonly associated with organized crime groups?

A security team is using CAPEC to understand how an attacker might exploit a buffer overflow vulnerability. Which CAPEC category would they most likely consult?

An attacker sends a specially crafted email to an employee, impersonating the CEO and requesting an urgent wire transfer. Which attack pattern does this describe?

Keep studying — Governance, risk, and compliance