Threat Intent, Motive, and Goal SCE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A SOC analyst is investigating a malware infection on a point-of-sale (POS) system at a retail store. The malware is designed to capture credit card data from the memory of the POS system and send it to an external server. The malware does not affect the POS system's ability to process transactions. What is the most likely threat goal?

   • ATo steal credit card data
   • BTo encrypt the POS system's files for ransom
   • CTo disrupt the retail store's operations
   • DTo gain remote access to the retail store's network
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A SOC analyst is reviewing an incident where an attacker gained access to a company's email system and read the CEO's emails. The attacker then used the information to send a fraudulent wire transfer request to the CFO. The wire transfer was not completed because the CFO verified the request. Which combination of intent, motive, and goal best describes this attack?

   • AIntent to gather intelligence; motive of espionage; goal of data exfiltration
   • BIntent to cause reputational damage; motive of competition; goal of data exposure
   • CIntent to commit fraud; motive of financial gain; goal of unauthorized fund transfer
   • DIntent to disrupt operations; motive of hacktivism; goal of service outage
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A SOC team is investigating a breach at a financial services firm. The attacker used a zero-day vulnerability to gain access, then moved laterally to the firm's trading systems. Instead of stealing data or demanding a ransom, the attacker made a series of unauthorized trades that caused significant financial losses. The attacker then covered their tracks and exited the network. Which combination of intent, motive, and goal best explains this attack?

   • AIntent to extort the firm; motive of financial gain; goal of demanding a ransom after the trades
   • BIntent to steal data; motive of espionage; goal of exfiltrating trading algorithms
   • CIntent to prove a point; motive of hacktivism; goal of exposing the firm's risky practices
   • DIntent to cause financial loss; motive of disruption; goal of manipulating the market
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   A group of attackers defaces a government website and posts political messages. Which motive best describes this threat actor's behavior?

   • ADisruption
   • BHacktivism
   • CEspionage
   • DFinancial gain
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   In cybersecurity analysis, what does the term 'threat intent' most directly refer to?

   • AThe financial resources available to the attacker
   • BThe attacker's desired outcome or purpose behind an attack
   • CThe vulnerability exploited in the target system
   • DThe specific tools and techniques used during an attack
   Reveal Solution Discussion Select an answer first