You see confidential data being exfiltrated to an IP address that is attributed to a known Advanced Persistent Threat group. Assume that this is part of a real attach and not a network misconfiguration. Which category does this event fall under as defined in the Diamond Model of Intrusion?
A. reconnaissance
B. weaponization
C. delivery
D. action on objectives
Correct answer is D.
It is an Advanced Persistent Threat group that being exfiltrated confidential data, and Action and Objectives says that adversary is inside the network and starting to achieve his or her objective for launching the attack. An adversary could use this opportunity to steal data.
kkkkkk D is the answer l gues VCE was tired…
Book page # 265
Actions and objectives
Answer = D
Definitively, the answer is D.
Answer is D
D. final action or objective (data being exfiltrated to an IP address)
Answer is A
Sorry D
Correct answer is D.
Answer is D