nerdexam
EC-Council

212-89 · Question #91

Alexis is working as an incident responder in XYZ organization. She was asked to identify and attribute the actors behind an attack that took place recently. In order to do so, she is performing…

The correct answer is C. True attribution. True attribution in the context of cyber incidents involves the identification of the actual individuals, groups, or entities behind an attack. This can include pinpointing specific persons, organizations, societies, or even countries that sponsor or carry out cyber intrusions…

Incident Handling and Response Process

Question

Alexis is working as an incident responder in XYZ organization. She was asked to identify and attribute the actors behind an attack that took place recently. In order to do so, she is performing threat attribution that deals with the identification of the specific person, society, or a country sponsoring a well-planned and executed intrusion or attack over its target. Which of the following types of threat attributions Alexis performed?

Options

  • ANation-state attribution
  • BIntrusion-set attribution
  • CTrue attribution
  • DCampaign attributio

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    5% (2)
  • C
    93% (39)

Explanation

True attribution in the context of cyber incidents involves the identification of the actual individuals, groups, or entities behind an attack. This can include pinpointing specific persons, organizations, societies, or even countries that sponsor or carry out cyber intrusions or attacks. Alexis's efforts to identify and attribute the actors behind a recent attack by distinguishing the specific origins of the threat align with the concept of true attribution, which goes beyond mere speculation to provide concrete evidence about the perpetrators.

Topics

#threat attribution#true attribution#threat intelligence#intrusion attribution

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice