Level 5 - Threat Agents Quiz

What is the difference between an internal and an external threat agent?

• A) An internal threat agent poses a threat from within the organization, while an external threat agent poses a threat from outside the organization.
• B) An external threat agent is always more harmful than an internal threat agent.
• C) There's no difference between an internal and an external threat agent.
• D) An internal threat agent always acts maliciously, while an external threat agent can act either maliciously or non-maliciously.

What is an advanced persistent threat (APT)?

• A) A type of persistent threat where the attacker tries to gain and retain access to the network without being detected.
• B) A type of non-persistent threat where the attacker aims for a one-time attack.
• C) A threat where the attacker uses open-source intelligence before carrying out the attack.
• D) A threat that is carried out by script kiddies to exploit well-known vulnerabilities in systems.

Which of these is NOT a type of threat actor?

• A) Insider
• B) White hat
• C) Black hat
• D) Data owner

What is the primary motive for nation state attacks?

• A) Financial gain
• B) To impress their friends or garner attention in the hacking community
• C) Obtaining information and/or crippling systems
• D) Personal financial gain

What are the steps in the strategy hackers use to attack a system?

• A) Perform reconnaissance, Use social engineering, Use technical approaches, Breach the system, Escalate privileges, Create a backdoor, Stage computers, Exploit vulnerabilities
• B) Perform reconnaissance, Escalate privileges, Breach the system, Use social engineering, Use technical approaches, Create a backdoor, Stage computers, Exploit vulnerabilities
• C) Use social engineering, Use technical approaches, Breach the system, Perform reconnaissance, Escalate privileges, Create a backdoor, Stage computers, Exploit vulnerabilities
• D) Breach the system, Perform reconnaissance, Use social engineering, Use technical approaches, Escalate privileges, Create a backdoor, Stage computers, Exploit vulnerabilities

What is the principle of least privilege?

• A) A principle that states that users or groups are given only the access they need to do their jobs and nothing more.
• B) A principle that states that all users or groups should be given full access to the system.
• C) A principle that states that users or groups should be given less access than they need to do their jobs.
• D) A principle that states that only the system administrator should have full access to the system.

What does "Randomness" in security refer to?

• A) The constant change in personal habits and passwords to prevent predictable behavior.
• B) Implementing multiple security strategies to protect the same asset.
• C) The use of a variety of methods in implementing defensive layers.
• D) The process of making the security measures complex and difficult to understand and use.