Threat Actors and Motivations SY0-701 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A marketing department at a large company uses a cloud-based file-sharing service to collaborate on campaign materials without IT's knowledge or approval. The service is not sanctioned by the organization and stores sensitive customer data. Which of the following best describes this situation?

   • AInsider threat
   • BData exfiltration
   • CShadow IT
   • DEspionage
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company discovers that a competitor has obtained its proprietary manufacturing process. An investigation reveals that a former employee, now working for the competitor, had downloaded the process documents to a personal cloud storage account before leaving the company. Which of the following best describes this incident?

   • AShadow IT
   • BEspionage by a nation-state
   • CData exfiltration by an insider
   • DHacktivism
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A government agency discovers that a foreign adversary has been conducting a long-term cyber espionage campaign against it. The attackers have used zero-day exploits, custom malware, and have maintained persistence in the network for over a year. The stolen data includes classified military plans and diplomatic communications. The attackers have not made any ransom demands or publicly leaked the data. Which threat actor profile best matches this activity?

   • AOrganized crime group
   • BNation-state actor
   • CInsider threat
   • DHacktivist group
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is a primary objective of nation-state threat actors?

   • ATo disrupt services for personal amusement
   • BTo steal credit card information for immediate financial gain
   • CTo promote a social or political cause through website defacement
   • DTo gather intelligence and gain strategic advantages for their country
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst notices that a foreign government's embassy has been sending spear-phishing emails to employees of a defense contractor. The emails contain malicious attachments that, when opened, install a backdoor that allows remote access to the victim's workstation. The goal appears to be to gather information about ongoing military projects. Which threat actor profile best matches this activity?

   • ANation-state actor conducting espionage
   • BHacktivist group
   • COrganized crime group
   • DUnskilled attacker
   Reveal Solution Discussion Select an answer first