CompTIA CySA+ (CS0-003) — Question 142

Which of the following is a commonly used four-component framework to communicate threat actor behavior?

Answer options

• A. STRIDE
• B. Diamond Model of Intrusion Analysis
• C. Cyber Kill Chain
• D. MITRE ATT&CK

Correct answer: B

Explanation

The correct answer is B, the Diamond Model of Intrusion Analysis, which specifically breaks down and analyzes threat actor behaviors into four components. Options A, C, and D refer to other frameworks or models that address different aspects of cybersecurity but do not focus on this four-component structure.