A security researches is gathering information about a recent spoke in the number of targeted attacks against multinational banks. The spike is on top of already sustained attacks against the banks. Some of the previous attacks have resulted in the loss of sensitive data, but as of yet the attackers have not successfully stolen any funds.
Based on the information available to the researcher, which of the following is the MOST likely threat profile?
A. Nation-state-sponsored attackers conducting espionage for strategic gain.
B. Insiders seeking to gain access to funds for illicit purposes.
C. Opportunists seeking notoriety and fame for personal gain.
D. Hackvisits seeking to make a political statement because of socio-economic factors.
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
I’m thinking A on this….question says they have already got sensitive date….Answer A has ‘strategic gain’ in it…
Nation-state-sponsored attackers conducting espionage for strategic gain
I’m leaning towards D but A could be correct as well. I say D because I don’t see a place that states these attackers seem well funded or are using sophisticated tools. Hacktivists may be interested in hacking banks due to what they stand for and to get compromising information about the banks but not for their money. Its more likely a hacktivist than a nation state hacker also simply based on the number of hacktivists compared to the number of nation state attackers.
Hacktivists would want everybody to know about what they have done.
Its A
D