210-255 · Question #81
Which of the following is not a metadata feature of the Diamond Model?
The correct answer is C. Devices. The Diamond Model of intrusion analysis defines specific meta-features, and 'Devices' is not among them - it is not part of the model's extended attribute set.
Question
Which of the following is not a metadata feature of the Diamond Model?
Options
- ADirection
- BResult
- CDevices
- DResources
How the community answered
(35 responses)- A6% (2)
- C91% (32)
- D3% (1)
Why each option
The Diamond Model of intrusion analysis defines specific meta-features, and 'Devices' is not among them - it is not part of the model's extended attribute set.
Direction is a valid Diamond Model meta-feature that describes the flow of the attack relative to the infrastructure and victim.
Result is a valid Diamond Model meta-feature that captures the outcome of the adversary's action, such as success, failure, or unknown.
The Diamond Model's meta-features include Timestamp, Phase, Result, Direction, Methodology, and Resources - but 'Devices' is not a defined meta-feature in the model. Meta-features augment the four core features (Adversary, Capability, Infrastructure, Victim) and 'Devices' does not appear in Caltagirone et al.'s original specification of the model.
Resources is a valid Diamond Model meta-feature that describes the external resources required by the adversary to execute the capability.
Concept tested: Diamond Model meta-features and intrusion analysis framework
Source: https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf
Topics
Community Discussion
No community discussion yet for this question.