Which of the following is a commonly used four-component framework to communicate threat actor behavior?

The correct answer is B. Diamond Model of Intrusion Analysis. The Diamond Model of Intrusion Analysis is a framework that describes the relationship between four components of a cyberattack: adversary, capability, infrastructure, and victim. It helps analysts understand the behavior and motivation of threat actors, as well as the tools and

Submitted by mike_84· Mar 6, 2026Security operations

Question

Options

ASTRIDE
BDiamond Model of Intrusion Analysis
CCyber Kill Chain
DMITRE ATT&CK

How the community answered

(22 responses)

A
5% (1)
B
95% (21)

Explanation

The Diamond Model of Intrusion Analysis is a framework that describes the relationship between four components of a cyberattack: adversary, capability, infrastructure, and victim. It helps analysts understand the behavior and motivation of threat actors, as well as the tools and methods they use to compromise their targets.

Topics

#Threat intelligence frameworks#Diamond Model#Threat actor behavior

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice