Emerging Threats, Threat Actors, and Attack Vectors TIE Practice Questions (Page 8)

Questions 36–39

1. 36expert · hard

   A multinational corporation has been hit by a ransomware attack that also exfiltrated data. The attackers are demanding a large ransom and threatening to release sensitive customer data. The company has cyber insurance, but the policy excludes coverage for state-sponsored attacks. The company's threat intelligence team has identified indicators that suggest the attack may be state-sponsored. The company's legal team is concerned about the insurance claim. What is the most appropriate action?

   • ARefuse to pay the ransom and hope the attackers do not leak the data.
   • BPay the ransom and then file the insurance claim without mentioning the possible state sponsorship.
   • CImmediately file the insurance claim and let the insurer investigate the attribution.
   • DConduct a thorough attribution analysis to determine the likely threat actor before filing the insurance claim.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A manufacturing company discovers that a threat actor has been inside their network for six months, slowly exfiltrating engineering blueprints and intellectual property. The attacker used legitimate credentials, moved laterally at night, and avoided triggering alarms. The company's threat intelligence team must profile the likely actor to guide their response. Which profile best matches this behavior?

   • AA financially motivated cybercriminal gang deploying ransomware for extortion.
   • BA state-sponsored advanced persistent threat (APT) group with a focus on industrial espionage.
   • CAn insider with a grudge against the company's management.
   • DA hacktivist group seeking to publicly expose the company's environmental record.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A government agency has been targeted by a threat actor who is using social engineering to trick employees into installing remote access tools. The attacker then uses these tools to access sensitive systems. The agency suspects a foreign intelligence service is behind the attack. Which threat actor profile best fits?

   • AState-sponsored APT group conducting espionage.
   • BInsider threat from a disgruntled employee.
   • CCybercriminal group seeking financial gain through ransomware.
   • DHacktivist group protesting government policies.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which threat actor category is most likely to be motivated by financial gain and uses readily available tools to target small businesses?

   • ACybercriminals
   • BInsiders
   • CNation-state actors
   • DHacktivists
   Reveal Solution Discussion Select an answer first