Certified Threat Intelligence Analyst (CTIA) — Question 66

Which of the following types of threat attribution deals with the identification of the specific person, society, or a country sponsoring a well-planned and executed intrusion or attack over its target?

Answer options

• A. Nation-state attribution
• B. True attribution
• C. Campaign attribution
• D. Intrusion-set attribution

Correct answer: B

Explanation

True attribution is the most precise form of threat attribution, as it seeks to identify the specific entity responsible for an attack. Other types, such as nation-state or campaign attribution, may indicate broader groups or motives without pinpointing individual actors. Thus, they do not provide the same level of specificity as true attribution.