210-255 Question #9: Real Exam Question with Answer & Explanation

The correct answer is C: They are perpetrators of attacks.. Threat actors are the individuals or groups who carry out cyberattacks, making them the perpetrators, not the targets or assets.

Attack Methods

Question

Which statement about threat actors is true?

Options

AThey are any company assets that are threatened.
BThey are any assets that are threatened.
CThey are perpetrators of attacks.
DThey are victims of attacks.

Explanation

Threat actors are the individuals or groups who carry out cyberattacks, making them the perpetrators, not the targets or assets.

Common mistakes.

A. Company assets that are threatened are referred to as 'assets at risk' or attack targets, not threat actors.
B. Assets that are threatened are the objects of an attack, which describes victims or targets rather than perpetrators.
D. Victims of attacks are the affected parties or targets, the opposite role from a threat actor.

Concept tested. Definition of threat actor in cybersecurity

Reference. https://csrc.nist.gov/glossary/term/threat_actor

Topics

#threat actors#security terminology#attacker classification#threat intelligence

Full 210-255 Practice