Threat Actors Classification

Which of the following is an example of an internal threat?

• Phishing email from an external attacker

• b) Employee leaking confidential files

• c) Ransomware attack targeting a company

• d) SQL injection on a website

An attack requiring advanced technical skills and significant resources is classified as?

• a) Script kiddie attack

• b) Low sophistication attack

• c) High sophistication attack

• d) Insider threat

Which motivation is most common for hacktivists?

• a) Financial gain

• b) Revenge

• c) Political or social activism

• d) Espionage

A cyberattack targeting critical infrastructure, like a power grid, is likely carried out by:

• a) Script kiddies

• b) Advanced Persistent Threats (APTs)

• c) Insider threats

• d) Hacktivists

What is the primary challenge in detecting insider threats?

• a) Lack of technical skills

• b) They have legitimate access to systems

• c) They use sophisticated tools

• d) They target external systems

A low-resource attacker who uses pre-built scripts for hacking is known as a:

• a) Hacktivist

• b) Script kiddie

• c) Insider threat

• d) APT

What is the key difference between internal and external threats?

• a) Level of sophistication

• b) Physical vs. cyber attacks

• c) Source of the threat (inside or outside the organization)

• d) Motivation of the attacker

An attacker who targets sensitive information for financial gain is likely motivated by:

• a) Activism

• b) Espionage

• c) Profit

• d) Sabotage

Which of the following is NOT an example of a cybersecurity threat classification?

• a) Intent/Motivation

• b) Level of Sophistication

• c) Firewall Configuration

• d) Resources/Funding

A poorly funded attacker who relies on social engineering techniques is likely:

• a) APT

• b) Hacktivist

• c) Insider threat

• d) Script kiddie