CSX Identify and Assess Cybersecurity Threats 4

Question 1

A company's threat intelligence team identifies that their industry sector is being actively targeted by a nation-state group. What type of threat intelligence is this?

Accepted Answer

Strategic intelligence

Answer

Strategic intelligence provides high-level information about threat actors, their motivations, and targeting trends to inform executive decision-making and long-term planning.

Question 2

Which attack technique involves an adversary intercepting communications between two parties without either party being aware?

Accepted Answer

Man-in-the-Middle (MitM) attack

Answer

A Man-in-the-Middle attack allows an adversary to secretly intercept and potentially alter communications between two parties who believe they are communicating directly.

Question 3

In the context of the Diamond Model of Intrusion Analysis, which four elements are used to describe a cyber intrusion?

Accepted Answer

Adversary, Capability, Infrastructure, Victim

Answer

The Diamond Model characterizes intrusions using four core elements: Adversary (who), Capability (how), Infrastructure (where), and Victim (target).

Question 4

What is the primary goal of a Business Email Compromise (BEC) attack?

Accepted Answer

Manipulating employees into fraudulent wire transfers or credential disclosure

Answer

BEC attacks use social engineering via spoofed or compromised executive email accounts to trick employees into transferring funds or revealing sensitive information.

Question 5

An analyst discovers that an attacker used a legitimate administrative tool already present on the system to move laterally. This technique is known as:

Accepted Answer

Living off the land (LotL)

Answer

Living off the land (LotL) techniques use legitimate built-in tools like PowerShell or WMI to conduct attacks, making detection harder since no foreign binaries are introduced.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Identify and Assess Cybersecurity Threats 4