Question

Difficulty: EasyThreat Actors, Attributes, and Attack Vectors

Match each threat actor type to its primary defining attribute or motivation in cybersecurity. Which pairings accurately reflect each threat actor profile?

  • Nation-state actorHigh technical sophistication backed by substantial resources and geopolitical intent
  • Insider threatAuthorized access to internal systems, credentials, and organizational sensitive data
  • HacktivistIdeological, political, or social motivations driving public disruption or defacement
  • Script kiddieLow technical expertise relying primarily on automated, pre-existing attack tools

Answer

Nation-state actor matches high technical sophistication and geopolitical intent; Insider threat matches authorized access to internal systems; Hacktivist matches ideological or political motivation; Script kiddie matches low technical expertise relying on pre-existing tools.
Nation-state actors possess extensive funding and geopolitical objectives; insider threats hold existing authorized privileges; hacktivists are motivated by social or political causes; and script kiddies operate using unoriginal, pre-packaged exploit kits due to limited technical skills.

Step-by-Step Solution

1
Analyze each threat actor category based on their skill level, access rights, and underlying motivation.
Identified nation-state actors as high-resource entities, insiders as credentialed individuals, hacktivists as ideology-driven actors, and script kiddies as low-skilled tool users.
Distinguishing threat actor attributes is essential for accurate threat modeling and risk assessment.

Key Concept

Threat Actor Characteristics and Attributes
Rate this question