Insider Attacks SCE Practice Questions (Page 9)

Questions 41–42

1. 41expert · hard

   A security team is investigating a data leak that occurred when an employee accidentally left a laptop on a train. The laptop contained unencrypted customer data. Which type of insider threat does this represent, and what is the most effective mitigation to prevent similar incidents?

   • ANegligent insider; enforce full-disk encryption and provide training on mobile device security
   • BCompromised insider; reset all passwords and enforce multi-factor authentication
   • CExternal attacker; enhance network security controls
   • DMalicious insider; implement stricter access controls
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which statement best distinguishes an insider attack from an external attack?

   • AInsider attacks are less severe than external attacks because they involve trusted employees.
   • BInsider attacks are always accidental, while external attacks are always intentional.
   • CInsider attacks are performed by individuals who have authorized access, whereas external attacks are performed by individuals without such access.
   • DInsider attacks only target data, while external attacks only target systems.
   Reveal Solution Discussion Select an answer first