nerdexam
Cisco

210-255 · Question #81

Which of the following is not a metadata feature of the Diamond Model?

The correct answer is C. Devices. The Diamond Model of intrusion analysis defines specific meta-features, and 'Devices' is not among them - it is not part of the model's extended attribute set.

Security Monitoring

Question

Which of the following is not a metadata feature of the Diamond Model?

Options

  • ADirection
  • BResult
  • CDevices
  • DResources

How the community answered

(35 responses)
  • A
    6% (2)
  • C
    91% (32)
  • D
    3% (1)

Why each option

The Diamond Model of intrusion analysis defines specific meta-features, and 'Devices' is not among them - it is not part of the model's extended attribute set.

ADirection

Direction is a valid Diamond Model meta-feature that describes the flow of the attack relative to the infrastructure and victim.

BResult

Result is a valid Diamond Model meta-feature that captures the outcome of the adversary's action, such as success, failure, or unknown.

CDevicesCorrect

The Diamond Model's meta-features include Timestamp, Phase, Result, Direction, Methodology, and Resources - but 'Devices' is not a defined meta-feature in the model. Meta-features augment the four core features (Adversary, Capability, Infrastructure, Victim) and 'Devices' does not appear in Caltagirone et al.'s original specification of the model.

DResources

Resources is a valid Diamond Model meta-feature that describes the external resources required by the adversary to execute the capability.

Concept tested: Diamond Model meta-features and intrusion analysis framework

Source: https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf

Topics

#Diamond Model#threat intelligence#metadata#cyber threat framework

Community Discussion

No community discussion yet for this question.

Full 210-255 Practice