Threat Actors and Motivations SY0-701 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which method is commonly used for data exfiltration?

   • AConducting a vulnerability scan
   • BInstalling security patches
   • CUsing a USB drive to copy sensitive files
   • DEncrypting data at rest
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which characteristic is most commonly associated with nation-state threat actors?

   • AThey are usually unskilled and rely on publicly available tools
   • BThey operate alone without any external support or funding
   • CThey possess advanced technical skills and significant resources, often with state sponsorship
   • DThey are typically financially motivated and target random individuals
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   How does financial gain motivate cyber threat actors?

   • AThey seek to damage the reputation of a company
   • BThey are interested in gathering intelligence for a foreign government
   • CThey aim to steal data that can be sold or used for extortion
   • DThey want to demonstrate their technical skills
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A small retail company experiences a ransomware attack. The malware was delivered via a phishing email and encrypted files on a single point-of-sale terminal. The ransom note demands a small payment in cryptocurrency. Forensic analysis shows the malware was a known variant with no custom modifications, and the attacker's infrastructure was a free hosting service. Which threat actor profile is most consistent with this attack?

   • AUnskilled attacker using readily available malware
   • BNation-state actor testing cyber capabilities
   • CInsider threat seeking revenge
   • DHacktivist group protesting the company's business practices
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A mid-sized company experiences a ransomware attack that encrypts its file servers. The ransom note demands a relatively small payment and provides a link to a dark web site for payment. The malware used is a known variant that is available for purchase on underground forums. The attack appears to have originated from a single phishing email. Which threat actor profile is most likely responsible?

   • ANation-state actor
   • BOrganized crime group
   • CHacktivist group
   • DUnskilled attacker using a Ransomware-as-a-Service (RaaS) kit
   Reveal Solution Discussion Select an answer first