Certified Threat Intelligence Analyst (CTIA) — Question 20

An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?

Answer options

• A. System modeling
• B. Threat determination and identification
• C. Threat profiling and attribution
• D. Threat ranking

Correct answer: C

Explanation

Mr. Andrews is in the 'Threat profiling and attribution' stage because he is gathering and analyzing detailed information about the threat actor's behavior, goals, and motives. The other options, such as 'System modeling' and 'Threat determination and identification,' refer to earlier phases of threat modeling where the focus is on understanding the system and identifying potential threats, rather than profiling the adversary.