A SOC analyst is investigating a breach where the attacker encrypted critical databases and left a note demanding payment in cryptocurrency. The attacker did not exfiltrate any data before encryption. Which threat intent and goal pair is most accurate for this incident?

Intent to conduct espionage; goal of system compromise

Intent to steal data; goal of data exfiltration

Intent to extort money; goal of service disruption

Intent to cause reputational damage; goal of public exposure

A SOC analyst is examining a suspicious file that was downloaded from a website. The file is a legitimate-looking PDF, but when opened, it exploits a vulnerability in the PDF reader to install a backdoor on the system. The backdoor allows remote access to the system. What is the most likely threat intent?

To gain persistent remote access to the system

To encrypt the system's files for ransom

To disrupt the system's normal operations

An attacker is motivated by financial gain. Their intent is to steal customer data, and their goal is to exfiltrate a database. How does this relationship affect their attack strategy?

The attacker will attempt to disrupt services by launching a DDoS attack

The attacker will avoid any actions that could be traced back to them

The attacker will focus on defacing websites to spread a message

The attacker will likely target systems that store valuable data and use methods to extract it

EC-CouncilSOC Essentials

Domain 2Objective 1

Threat Intent, Motive, and Goal SCE Practice Questions (Page 5)

Part of the Fundamentals of Cyber Threats domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

4concepts

Questions 21–25

21foundation · easy
Which of the following is a specific goal that an attacker might aim to achieve?
Select an answer first
22application · medium
A SOC analyst is investigating a breach where the attacker encrypted critical databases and left a note demanding payment in cryptocurrency. The attacker did not exfiltrate any data before encryption. Which threat intent and goal pair is most accurate for this incident?
Select an answer first
23application · medium
A SOC analyst is examining a suspicious file that was downloaded from a website. The file is a legitimate-looking PDF, but when opened, it exploits a vulnerability in the PDF reader to install a backdoor on the system. The backdoor allows remote access to the system. What is the most likely threat intent?
Select an answer first
24foundation · easy
An attacker is motivated by financial gain. Their intent is to steal customer data, and their goal is to exfiltrate a database. How does this relationship affect their attack strategy?
Select an answer first
25foundation · easy
Which of the following is a common motive behind cyber threats?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Threat Intent, Motive, and Goal SCE Practice Questions (Page 5)

Questions 21–25

Which of the following is a specific goal that an attacker might aim to achieve?

A SOC analyst is investigating a breach where the attacker encrypted critical databases and left a note demanding payment in cryptocurrency. The attacker did not exfiltrate any data before encryption. Which threat intent and goal pair is most accurate for this incident?

An attacker is motivated by financial gain. Their intent is to steal customer data, and their goal is to exfiltrate a database. How does this relationship affect their attack strategy?

Which of the following is a common motive behind cyber threats?

Keep studying — Fundamentals of Cyber Threats