Security+ Threat Actors and Motivations

1. What is the primary goal of a DDoS attack?

Steal sensitive data

Disrupt service availability

Install malware

Modify files

2. What is the primary goal of a vulnerability assessment in threat mitigation?

Identify and prioritize weaknesses before attackers exploit them

Eliminate all network traffic

Prevent legitimate users from accessing systems

Install antivirus only

3. Which mitigation strategy is most effective for protecting against credential theft?

Using strong passwords and multi-factor authentication

Keeping passwords written on sticky notes

Sharing credentials across accounts

Disabling password policies

Submit

5. Which type of threat actor typically has the most resources and sophistication?

Nation-state

Competitor

Disgruntled employee

Opportunistic attacker

Submit

7. What is a key difference between vulnerability and threat?

Vulnerabilities are weaknesses; threats are actors exploiting them

They are the same concept

Threats only occur in networks

Vulnerabilities require intent

8. Which of the following best describes a supply chain attack?

Targeting a vendor to compromise a larger target

Attacking only manufacturing facilities

Stealing office supplies

Intercepting physical shipments only

Submit

10. Which threat vector describes an attacker using malicious software that replicates itself?

Trojan horse

Virus

Rootkit

Spyware

11. Which threat actor type is primarily motivated by financial gain and typically targets payment systems?

Nation-state

Cybercriminal

Hacker

Script kiddie

Submit

13. Which control mitigates the risk of privilege escalation?

Disabling firewalls

Implementing least privilege and regular patching

Sharing administrative accounts

Allowing all user permissions

14. Phishing attacks are often used by threat actors to achieve which goal?

Destroy all data

Gain initial access and credentials

Crash the entire network

Increase system performance

15. Which of the following is a characteristic of a zero-day vulnerability?

It has been public for over one year

It is unknown to the vendor and has no patch

It only affects outdated systems

It requires administrative privileges

Submit

17. What is a hacktivist primarily motivated by?

Personal financial gain

Ideological or political beliefs

Employment opportunities

System vulnerabilities

18. Which mitigation strategy is most effective against ransomware attacks?

Implement strong access controls and maintain offline backups

Use only antivirus software

Disable all network connections

Require password changes daily

Submit

20. What is the primary motivation of an APT (Advanced Persistent Threat) group sponsored by a government?

Financial profit

Political or military advantage

Notoriety and fame

System testing

Security+ Threat Actor Types and Motivations Quiz

1. What is the primary goal of a DDoS attack?

2.

What first name or nickname would you like us to use?

2. What is the primary goal of a vulnerability assessment in threat mitigation?

3. Which mitigation strategy is most effective for protecting against credential theft?

4. A rootkit is dangerous because it provides ____ access and often evades detection.

5. Which type of threat actor typically has the most resources and sophistication?

6. Implementing security awareness training primarily reduces risk from ____.

7. What is a key difference between vulnerability and threat?

8. Which of the following best describes a supply chain attack?

9. Encryption and multi-factor authentication are controls that primarily mitigate threats to ____.

10. Which threat vector describes an attacker using malicious software that replicates itself?

11. Which threat actor type is primarily motivated by financial gain and typically targets payment systems?

12. Social engineering is a vulnerability that exploits ____.

13. Which control mitigates the risk of privilege escalation?

14. Phishing attacks are often used by threat actors to achieve which goal?

15. Which of the following is a characteristic of a zero-day vulnerability?

16. A script kiddie typically lacks ____.

17. What is a hacktivist primarily motivated by?

18. Which mitigation strategy is most effective against ransomware attacks?

19. An insider threat differs from external threats primarily because the insider has ____.

20. What is the primary motivation of an APT (Advanced Persistent Threat) group sponsored by a government?