Threat Modeling CAS-005 Practice Questions (Page 5)

Questions 21–22

1. 21application · medium

   A security analyst is profiling a threat actor that has been conducting distributed denial-of-service (DDoS) attacks against financial institutions. The attacks use a botnet of compromised IoT devices. Which actor characteristic is MOST consistent with this behavior?

   • ANation-state actor with advanced persistent threat capabilities
   • BCybercriminal syndicate focused on financial theft
   • CHacktivist group with ideological motivations
   • DInsider threat with privileged access
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security operations center (SOC) is analyzing a series of attacks against a government contractor. The attacks involve sophisticated spear-phishing emails with zero-day exploits and custom malware that communicates with command-and-control servers. The SOC suspects a nation-state actor. Which characteristic is MOST consistent with this attribution?

   • AThe attacks are financially motivated and target cryptocurrency wallets
   • BThe attacks are politically motivated and aim to disrupt public services
   • CThe attacks are highly targeted and use advanced, custom tools
   • DThe attacks use publicly available exploit kits and are opportunistic
   Reveal Solution Discussion Select an answer first