Day 2 Sec+ Review

A company's sensitive data was stolen by a highly sophisticated group that appeared to be well-funded and had access to advanced tools and techniques. This group was later identified as working on behalf of a foreign government. Which type of threat actor is responsible for this attack?

• Hacktivist

•  Insider threat

• Organized crime

• Nation-state

A disgruntled employee intentionally leaked confidential company information to the public after being passed over for a promotion. What type of threat actor does this scenario describe?

• Hacktivist

• Insider threat

• Unskilled attacker

• Organized crime

An activist group defaces the website of a major corporation, posting political messages and disrupting services to draw attention to their cause. What type of threat actor and motivation best describe this situation?

• Nation-state, Espionage

• Unskilled attacker, Revenge

• Hacktivist, Philosophical/political beliefs

• Organized crime, Financial gain

Which attribute most clearly distinguishes an internal
threat actor from an external one?

• The type of malware used

• The level of sophistication

• The presence of authorized access to systems

• Whether the attacker uses social engineering

Which scenario represents an opportunistic attack?

• Attackers scan the internet for any vulnerable web servers to exploit

• A disgruntled employee deliberately disables security controls

• A whistleblower sends internal emails to regulators

• A targeted phishing campaign against a CEO

Which distinction separates white hat from black hat hackers?

• The type of tools they use

• Their level of intelligence

• Whether they work alone

• Authorization to access systems

Why do nation-state actors often have significant capabilities compared to other
threat groups?

• They only use automated tools

• They do not need to conceal their attacks

• They possess government resources and funding

• They prefer accidental attacks

A corporation hires someone to steal trade secrets from a business rival’s
network. Which motivation applies?

• Financial espionage by a competitor

• Chaotic mischief

• National military objectives

• Regulatory compliance auditing

Which attribute most clearly differentiates a script kiddie from an advanced
attacker?

• Intent to target a specific system

• Use of automated tools developed by others

• Operation within only one legal jurisdiction

• Political motivation to influence elections

Which of the following is a human attack surface element?

• USB ports

• Outdated web server software

• Incorrect firewall rule sets

• Weak password practices among staff