312-85 · Question #13
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the…
The correct answer is C. Threat profiling and attribution. Threat profiling and attribution (C) is correct because Mr. Andrews is specifically collecting information about the threat actor - their technological capabilities, goals, and motives. This is the defining activity of threat profiling: building a detailed portrait of who the…
Question
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure. What stage of the threat modeling is Mr. Andrews currently in?
Options
- ASystem modeling
- BThreat determination and identification
- CThreat profiling and attribution
- DThreat ranking
How the community answered
(37 responses)- A3% (1)
- B11% (4)
- C84% (31)
- D3% (1)
Explanation
Threat profiling and attribution (C) is correct because Mr. Andrews is specifically collecting information about the threat actor - their technological capabilities, goals, and motives. This is the defining activity of threat profiling: building a detailed portrait of who the adversary is and why they act, which then informs countermeasure design.
- A (System modeling) is wrong because that stage focuses on understanding the target system - its architecture, data flows, and assets - not on characterizing the attacker.
- B (Threat determination and identification) is wrong because that stage is about discovering and cataloging what threats exist, not deeply profiling the actors behind them.
- D (Threat ranking) is wrong because ranking involves prioritizing identified threats by severity or likelihood, which comes after profiling is complete.
Memory tip: Think of "profiling" like a criminal profiler building a dossier - goals, motives, tools, behavior. When a question mentions actor characteristics (who, why, how they operate), that's always profiling and attribution.
Topics
Community Discussion
No community discussion yet for this question.