Threat Actors and Motivations SY0-701 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A multinational corporation discovers that a criminal group has been using a sophisticated phishing campaign to steal credentials from employees, then using those credentials to access the corporate network and steal payment card data. The stolen card data is being sold on underground forums. Which threat actor profile best matches this activity?

   • AOrganized crime group
   • BHacktivist group
   • CNation-state actor
   • DUnskilled attacker
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A group of activists defaces a government website and replaces the homepage with a message protesting a new surveillance law. They also publish a database of government employee email addresses that they claim was obtained through a vulnerability in a public-facing portal. No ransom is demanded, and the group issues a press release claiming responsibility. Which threat actor profile best describes this group?

   • AUnskilled attackers seeking notoriety
   • BNation-state actors conducting espionage
   • CHacktivists motivated by political ideology
   • DOrganized crime group seeking financial gain
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common impact of an unskilled attacker's actions?

   • ANation-state level intelligence collection
   • BCreation of new malware families
   • CDisruption of services using well-known vulnerabilities
   • DHighly targeted and stealthy data exfiltration over months
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which indicator might suggest an insider threat?

   • AAn employee receiving a promotion
   • BAn employee using a company-issued laptop for work
   • CAn employee accessing files outside of normal working hours
   • DAn employee attending a security training session
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the main objective of cyber espionage?

   • ATo extort money from victims
   • BTo test the security of a system
   • CTo steal sensitive information for strategic advantage
   • DTo disrupt services for political protest
   Reveal Solution Discussion Select an answer first