CAS-005 · Question #184
A nation-state actor is exposed for attacking large corporations by establishing persistence in smaller companies that are likely to be acquired by these large corporations. The actor then…
The correct answer is B. Comparing all existing credentials to personnel and services. Comparing all existing credentials to personnel and services is the best practice to investigate this threat. By reviewing and comparing the credentials used by employees and services within the company, the security officer can identify any unauthorized or suspicious accounts…
Question
A nation-state actor is exposed for attacking large corporations by establishing persistence in smaller companies that are likely to be acquired by these large corporations. The actor then provisions user accounts in the companies for use post-acquisition. Before an upcoming acquisition, a security officer conducts threat modeling with this attack vector. Which of the following practices is the best way to investigate this threat?
Options
- ARestricting internet traffic originating from countries in which the nation-state actor is known to
- BComparing all existing credentials to personnel and services
- CAuditing vendors to mitigate supply chain risk during the acquisition
- DPlacing a hold on all information about corporate interest in acquisitions
How the community answered
(49 responses)- A4% (2)
- B65% (32)
- C12% (6)
- D18% (9)
Explanation
Comparing all existing credentials to personnel and services is the best practice to investigate this threat. By reviewing and comparing the credentials used by employees and services within the company, the security officer can identify any unauthorized or suspicious accounts, including those provisioned by the nation-state actor for post-acquisition persistence. This step helps identify and mitigate the risk of malicious accounts being established before the acquisition takes place.
Community Discussion
No community discussion yet for this question.