CompTIA SecurityX (CAS-005) — Question 83
While reviewing recent incident reports a security officer discovers that several employees were contacted by the same individual who impersonated a recruiter. Which of the following best describes this type of correlation?
Answer options
- A. Spear-phishing campaign
- B. Threat modeling
- C. Red-team assessment
- D. Attack pattern analysis
Correct answer: D
Explanation
The correct answer is D, as the scenario illustrates a consistent method used by an attacker, which is typical of attack pattern analysis. Options A, B, and C do not accurately describe the correlation; a spear-phishing campaign specifically targets individuals, threat modeling is a proactive analysis method, and red-team assessments involve testing security measures rather than correlating incidents.