Which piece of information is needed for attribution in an investigation?

The correct answer is D. threat actor and associated behavior. Attribution in investigations involves identifying and linking the actions or behaviors of threat actors (individuals, groups, or entities) to a particular incident or attack. Understanding the behavior patterns, techniques, or tactics associated with known threat actors can assi

Submitted by fernanda_arg· Mar 6, 2026Security Monitoring

Question

Options

Aattack surface and the threat posing the risk
Battack vector and exploited vulnerability
Casset value and an asset owner
Dthreat actor and associated behavior

How the community answered

(28 responses)

A
4% (1)
C
4% (1)
D
93% (26)

Explanation

Attribution in investigations involves identifying and linking the actions or behaviors of threat actors (individuals, groups, or entities) to a particular incident or attack. Understanding the behavior patterns, techniques, or tactics associated with known threat actors can assist in attributing an attack to a specific group or individual. Associating the observed behaviors with a known threat actor's profile aids in establishing the source or identity of the attacker, contributing to attribution efforts in security investigations.

Topics

#Attribution#Threat actor#Incident investigation

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice