Topic 05 Practice Test 2 covers Threat Actors and Motivations for CompTIA Security+ SY0-701 and maps to objective 2.1: Compare and contrast common threat actors and motivations. For broader exam preparation, review the CompTIA Security+ Exam Dumps. Every option includes focused editorial reasoning explaining both the concept and its fit to the scenario.
Question 1
To abuse or misuse trusted access from inside an organization, which security approach should be selected?
- Ideological motivation
- Insider threat
- Data exfiltration motivation
- War motivation
Correct Answer: B
Correct Answer
Answer B is correct because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally. The deciding point is functional fit: this option covers the stated need, while War motivation addresses a goal connected to military or geopolitical conflict.
Incorrect Answers
Answer A is incorrect because Ideological motivation refers to a goal driven by philosophical, political, or social beliefs. That concept can be valid in another scenario, but this question is testing a person with legitimate internal access who causes harm intentionally or accidentally; Insider threat therefore fits the requirement more directly.
Answer C is incorrect because Data exfiltration motivation refers to a goal centered on stealing information from the target environment. The question is not asking for this function. It is testing a person with legitimate internal access who causes harm intentionally or accidentally, so Insider threat is the stronger fit.
Answer D is incorrect because War motivation refers to a goal connected to military or geopolitical conflict. This could be appropriate elsewhere, but the required function is a person with legitimate internal access who causes harm intentionally or accidentally; that makes Insider threat the precise choice. This question specifically tests the requirement represented by Insider threat.
Question 2
To launch opportunistic attacks without deep technical expertise, which security approach should be selected?
- Unskilled attacker
- Revenge motivation
- Financial gain motivation
- Hacktivist
Correct Answer: A
Correct Answer
Answer A is correct because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions. This is the precise fit for the scenario. Revenge motivation serves the different purpose of a goal of retaliating against an individual or organization for a perceived grievance.
Incorrect Answers
Answer B is incorrect because Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance. The key mismatch is functional: Unskilled attacker addresses an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, the need stated by the question.
Answer C is incorrect because Financial gain motivation refers to a goal of directly or indirectly obtaining money. The key mismatch is functional: Unskilled attacker addresses an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, the need stated by the question.
Answer D is incorrect because Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals. The key mismatch is functional: Unskilled attacker addresses an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, the need stated by the question.
Question 3
A design decision in a threat-intelligence assessment must provide government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. Which choice most directly satisfies that requirement?
- Insider threat
- Espionage motivation
- Shadow IT
- Nation-state threat actor
Correct Answer: D
Correct Answer
Answer D is correct because Nation-state threat actor means a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. This matches the requirement as written. Shadow IT can be valid in another context, but it is used for technology deployed or used without formal approval or governance from the responsible IT or security organization.
Incorrect Answers
Answer A is incorrect because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally. The concept is valid, but it does not match this stem. The required function is a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives, which maps to Nation-state threat actor.
Answer B is incorrect because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information. The question is not asking for this function. It is testing a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives, so Nation-state threat actor is the stronger fit.
Answer C is incorrect because Shadow IT means technology deployed or used without formal approval or governance from the responsible IT or security organization. The key mismatch is functional: Nation-state threat actor addresses a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives, the need stated by the question.
Question 4
What is an attacker motivated primarily by political, social, or ideological goals?
- Hacktivist
- Ideological motivation
- Nation-state threat actor
- Organized crime
Correct Answer: A
Correct Answer
Answer A is correct because Hacktivist means an attacker motivated primarily by political, social, or ideological goals. This matches the requirement as written. Ideological motivation can be valid in another context, but it is used for a goal driven by philosophical, political, or social beliefs.
Incorrect Answers
Answer B is incorrect because Ideological motivation refers to a goal driven by philosophical, political, or social beliefs. That concept can be valid in another scenario, but this question is testing an attacker motivated primarily by political, social, or ideological goals; Hacktivist therefore fits the requirement more directly.
Answer C is incorrect because Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. The scenario instead requires an attacker motivated primarily by political, social, or ideological goals, which is why Hacktivist is the better answer; this option serves the different function defined above.
Answer D is incorrect because Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner. The concept is valid, but it does not match this stem. The required function is an attacker motivated primarily by political, social, or ideological goals, which maps to Hacktivist.
Question 5
A security engineer is working through a threat-intelligence assessment. The immediate requirement is goal of making systems or services unavailable or unreliable. Which choice is the best fit?
- Financial gain motivation
- Organized crime
- Blackmail motivation
- Service disruption motivation
Correct Answer: D
Correct Answer
Answer D is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable. This matches the requirement as written. Financial gain motivation can be valid in another context, but it is used for a goal of directly or indirectly obtaining money.
Incorrect Answers
Answer A is incorrect because Financial gain motivation means a goal of directly or indirectly obtaining money. The question is not asking for this function. It is testing a goal of making systems or services unavailable or unreliable, so Service disruption motivation is the stronger fit.
Answer B is incorrect because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner. That concept can be valid in another scenario, but this question is testing a goal of making systems or services unavailable or unreliable; Service disruption motivation therefore fits the requirement more directly.
Answer C is incorrect because Blackmail motivation means a goal of coercing a victim by threatening disclosure, damage, or other harmful action. The scenario instead requires a goal of making systems or services unavailable or unreliable, which is why Service disruption motivation is the better answer; this option serves the different function defined above.
Question 6
To obtain valuable data for sale, leverage, intelligence, or competitive advantage, which security approach should be selected?
- Revenge motivation
- Insider threat
- Service disruption motivation
- Data exfiltration motivation
Correct Answer: D
Correct Answer
Answer D is correct because Data exfiltration motivation means a goal centered on stealing information from the target environment. This is the precise fit for the scenario. Revenge motivation serves the different purpose of a goal of retaliating against an individual or organization for a perceived grievance.
Incorrect Answers
Answer A is incorrect because Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance. This could be appropriate elsewhere, but the required function is a goal centered on stealing information from the target environment; that makes Data exfiltration motivation the precise choice.
Answer B is incorrect because Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally. The concept is valid, but it does not match this stem. The required function is a goal centered on stealing information from the target environment, which maps to Data exfiltration motivation.
Answer C is incorrect because Service disruption motivation refers to a goal of making systems or services unavailable or unreliable. That concept can be valid in another scenario, but this question is testing a goal centered on stealing information from the target environment; Data exfiltration motivation therefore fits the requirement more directly.
Question 7
What is a goal of directly or indirectly obtaining money?
- Blackmail motivation
- War motivation
- Financial gain motivation
- Revenge motivation
Correct Answer: C
Correct Answer
Answer C is correct because Financial gain motivation means a goal of directly or indirectly obtaining money. The requirement maps directly to this function, whereas War motivation is aimed at a goal connected to military or geopolitical conflict.
Incorrect Answers
Answer A is incorrect because Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action. This could be appropriate elsewhere, but the required function is a goal of directly or indirectly obtaining money; that makes Financial gain motivation the precise choice.
Answer B is incorrect because War motivation refers to a goal connected to military or geopolitical conflict. The concept is valid, but it does not match this stem. The required function is a goal of directly or indirectly obtaining money, which maps to Financial gain motivation.
Answer D is incorrect because Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance. The scenario instead requires a goal of directly or indirectly obtaining money, which is why Financial gain motivation is the better answer; this option serves the different function defined above.
Question 8
The control set for a threat-intelligence assessment must address both goal of making systems or services unavailable or unreliable and goal of directly or indirectly obtaining money. Which TWO choices map directly to those needs? Choose TWO.
- Financial gain motivation
- Organized crime
- Service disruption motivation
- Revenge motivation
- Blackmail motivation
Correct Answers: A, C
Correct Answers
Answer A is correct because Financial gain motivation means a goal of directly or indirectly obtaining money. One required function is exactly what this option provides. Organized crime may be useful elsewhere, but it is used for a financially motivated criminal group that operates in a coordinated and often professional manner.
Answer C is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable. One required function is exactly what this option provides. Blackmail motivation may be useful elsewhere, but it is used for a goal of coercing a victim by threatening disclosure, damage, or other harmful action.
Incorrect Answers
Answer B is incorrect because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner. The fixed-count answer set is Financial gain motivation, Service disruption motivation; this option does not fill one of those named functions.
Answer D is incorrect because Revenge motivation means a goal of retaliating against an individual or organization for a perceived grievance. The question requires exactly 2 selections: Financial gain motivation, Service disruption motivation. This option falls outside that required set.
Answer E is incorrect because Blackmail motivation means a goal of coercing a victim by threatening disclosure, damage, or other harmful action. The fixed-count answer set is Financial gain motivation, Service disruption motivation; this option does not fill one of those named functions.
Question 9
To collect strategic intelligence while avoiding detection, which security approach should be selected?
- Ideological motivation
- Blackmail motivation
- Espionage motivation
- Hacktivist
Correct Answer: C
Correct Answer
Answer C is correct because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information. The requirement maps directly to this function, whereas Hacktivist is aimed at an attacker motivated primarily by political, social, or ideological goals.
Incorrect Answers
Answer A is incorrect because Ideological motivation refers to a goal driven by philosophical, political, or social beliefs. The scenario instead requires a goal centered on covertly obtaining sensitive government, military, business, or research information, which is why Espionage motivation is the better answer; this option serves the different function defined above.
Answer B is incorrect because Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action. The concept is valid, but it does not match this stem. The required function is a goal centered on covertly obtaining sensitive government, military, business, or research information, which maps to Espionage motivation.
Answer D is incorrect because Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals. The key mismatch is functional: Espionage motivation addresses a goal centered on covertly obtaining sensitive government, military, business, or research information, the need stated by the question.
Question 10
During a threat-intelligence assessment, three requirements must be addressed: (1) person with legitimate internal access who causes harm intentionally or accidentally; (2) goal driven by philosophical, political, or social beliefs; and (3) goal of retaliating against an individual or organization for a perceived grievance. Which THREE choices best satisfy them? Choose THREE.
- Revenge motivation
- Organized crime
- Ideological motivation
- Insider threat
- Financial gain motivation
- War motivation
Correct Answers: A, C, D
Correct Answers
Answer A is correct because Revenge motivation means a goal of retaliating against an individual or organization for a perceived grievance. The fixed-count item needs this function in the answer set. Financial gain motivation covers a goal of directly or indirectly obtaining money, a different requirement.
Answer C is correct because Ideological motivation means a goal driven by philosophical, political, or social beliefs. This selection maps directly to one of the named needs. Organized crime addresses a financially motivated criminal group that operates in a coordinated and often professional manner, so it does not satisfy the same slot.
Answer D is correct because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally. This option satisfies a specific requirement in the stem; War motivation serves a goal connected to military or geopolitical conflict and therefore is not interchangeable with it.
Incorrect Answers
Answer B is incorrect because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner. The required choices are Ideological motivation, Revenge motivation, Insider threat. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Financial gain motivation means a goal of directly or indirectly obtaining money. The fixed-count answer set is Ideological motivation, Revenge motivation, Insider threat; this option does not fill one of those named functions. For example, Insider threat is required for a person with legitimate internal access who causes harm intentionally or accidentally.
Answer F is incorrect because War motivation means a goal connected to military or geopolitical conflict. The required choices are Ideological motivation, Revenge motivation, Insider threat. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Question 11
What is a goal centered on stealing information from the target environment?
- Data exfiltration motivation
- Revenge motivation
- Financial gain motivation
- Blackmail motivation
Correct Answer: A
Correct Answer
Answer A is correct because Data exfiltration motivation means a goal centered on stealing information from the target environment. That is the function the question is testing. Blackmail motivation would instead be used for a goal of coercing a victim by threatening disclosure, damage, or other harmful action.
Incorrect Answers
Answer B is incorrect because Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance. The scenario instead requires a goal centered on stealing information from the target environment, which is why Data exfiltration motivation is the better answer; this option serves the different function defined above.
Answer C is incorrect because Financial gain motivation refers to a goal of directly or indirectly obtaining money. The question is not asking for this function. It is testing a goal centered on stealing information from the target environment, so Data exfiltration motivation is the stronger fit.
Answer D is incorrect because Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action. The key mismatch is functional: Data exfiltration motivation addresses a goal centered on stealing information from the target environment, the need stated by the question.
Question 12
The control set for a threat-intelligence assessment must address both goal of making systems or services unavailable or unreliable and goal connected to military or geopolitical conflict. Which TWO choices map directly to those needs? Choose TWO.
- Financial gain motivation
- Nation-state threat actor
- Service disruption motivation
- War motivation
- Data exfiltration motivation
Correct Answers: C, D
Correct Answers
Answer C is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable. The fixed-count item needs this function in the answer set. Financial gain motivation covers a goal of directly or indirectly obtaining money, a different requirement.
Answer D is correct because War motivation means a goal connected to military or geopolitical conflict. One required function is exactly what this option provides. Nation-state threat actor may be useful elsewhere, but it is used for a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.
Incorrect Answers
Answer A is incorrect because Financial gain motivation means a goal of directly or indirectly obtaining money. Every answer slot must map to a stated requirement. The correct set is Service disruption motivation, War motivation, so this option cannot replace one of those selections.
Answer B is incorrect because Nation-state threat actor means a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. The required choices are Service disruption motivation, War motivation. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Data exfiltration motivation means a goal centered on stealing information from the target environment. Every answer slot must map to a stated requirement. The correct set is Service disruption motivation, War motivation, so this option cannot replace one of those selections.
Question 13
To degrade an adversary’s capabilities or support broader state objectives, which security approach should be selected?
- Organized crime
- Ideological motivation
- Blackmail motivation
- War motivation
Correct Answer: D
Correct Answer
Answer D is correct because War motivation means a goal connected to military or geopolitical conflict. This is the precise fit for the scenario. Ideological motivation serves the different purpose of a goal driven by philosophical, political, or social beliefs.
Incorrect Answers
Answer A is incorrect because Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner. The question is not asking for this function. It is testing a goal connected to military or geopolitical conflict, so War motivation is the stronger fit.
Answer B is incorrect because Ideological motivation refers to a goal driven by philosophical, political, or social beliefs. This could be appropriate elsewhere, but the required function is a goal connected to military or geopolitical conflict; that makes War motivation the precise choice.
Answer C is incorrect because Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action. The question is not asking for this function. It is testing a goal connected to military or geopolitical conflict, so War motivation is the stronger fit.
Question 14
An architect working on a threat-intelligence assessment needs one capability that provides attacker with limited original capability who often relies on publicly available tools, scripts, or instructions and another that provides goal centered on covertly obtaining sensitive government, military, business, or research information. Which TWO selections are the best match? Choose TWO.
- Hacktivist
- Unskilled attacker
- Service disruption motivation
- Espionage motivation
- Nation-state threat actor
Correct Answers: B, D
Correct Answers
Answer B is correct because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions. It belongs in the fixed-count answer set because it covers one of the stated requirements. Service disruption motivation instead serves a goal of making systems or services unavailable or unreliable and cannot replace this function.
Answer D is correct because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information. One required function is exactly what this option provides. Service disruption motivation may be useful elsewhere, but it is used for a goal of making systems or services unavailable or unreliable.
Incorrect Answers
Answer A is incorrect because Hacktivist means an attacker motivated primarily by political, social, or ideological goals. The question requires exactly 2 selections: Unskilled attacker, Espionage motivation. This option falls outside that required set. For example, Unskilled attacker is required for an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.
Answer C is incorrect because Service disruption motivation means a goal of making systems or services unavailable or unreliable. The required choices are Unskilled attacker, Espionage motivation. Although this option is security-relevant, it does not satisfy one of the functions named in the stem.
Answer E is incorrect because Nation-state threat actor means a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. The scenario calls for Unskilled attacker, Espionage motivation. Selecting this option would leave one of those required functions uncovered.
Question 15
The team is resolving a gap found during a threat-intelligence assessment: it needs goal of retaliating against an individual or organization for a perceived grievance. Which option is most appropriate?
- War motivation
- Revenge motivation
- Ideological motivation
- Hacktivist
Correct Answer: B
Correct Answer
Answer B is correct because Revenge motivation means a goal of retaliating against an individual or organization for a perceived grievance. This is the precise fit for the scenario. Hacktivist serves the different purpose of an attacker motivated primarily by political, social, or ideological goals.
Incorrect Answers
Answer A is incorrect because War motivation means a goal connected to military or geopolitical conflict. The key mismatch is functional: Revenge motivation addresses a goal of retaliating against an individual or organization for a perceived grievance, the need stated by the question.
Answer C is incorrect because Ideological motivation means a goal driven by philosophical, political, or social beliefs. The concept is valid, but it does not match this stem. The required function is a goal of retaliating against an individual or organization for a perceived grievance, which maps to Revenge motivation.
Answer D is incorrect because Hacktivist means an attacker motivated primarily by political, social, or ideological goals. The key mismatch is functional: Revenge motivation addresses a goal of retaliating against an individual or organization for a perceived grievance, the need stated by the question.
Question 16
What is an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions?
- Espionage motivation
- Shadow IT
- Unskilled attacker
- Hacktivist
Correct Answer: C
Correct Answer
Answer C is correct because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions. That makes it the best answer here; Hacktivist addresses an attacker motivated primarily by political, social, or ideological goals, not the function requested in the stem.
Incorrect Answers
Answer A is incorrect because Espionage motivation refers to a goal centered on covertly obtaining sensitive government, military, business, or research information. The scenario instead requires an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, which is why Unskilled attacker is the better answer; this option serves the different function defined above.
Answer B is incorrect because Shadow IT refers to technology deployed or used without formal approval or governance from the responsible IT or security organization. The question is not asking for this function. It is testing an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, so Unskilled attacker is the stronger fit.
Answer D is incorrect because Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals. The concept is valid, but it does not match this stem. The required function is an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, which maps to Unskilled attacker.
Question 17
What is a goal centered on covertly obtaining sensitive government, military, business, or research information?
- Espionage motivation
- Organized crime
- Ideological motivation
- Unskilled attacker
Correct Answer: A
Correct Answer
Answer A is correct because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information. The deciding point is functional fit: this option covers the stated need, while Unskilled attacker addresses an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.
Incorrect Answers
Answer B is incorrect because Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner. That concept can be valid in another scenario, but this question is testing a goal centered on covertly obtaining sensitive government, military, business, or research information; Espionage motivation therefore fits the requirement more directly.
Answer C is incorrect because Ideological motivation refers to a goal driven by philosophical, political, or social beliefs. The concept is valid, but it does not match this stem. The required function is a goal centered on covertly obtaining sensitive government, military, business, or research information, which maps to Espionage motivation.
Answer D is incorrect because Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions. The question is not asking for this function. It is testing a goal centered on covertly obtaining sensitive government, military, business, or research information, so Espionage motivation is the stronger fit.
Question 18
An architect working on a threat-intelligence assessment needs one capability that provides person with legitimate internal access who causes harm intentionally or accidentally and another that provides goal connected to military or geopolitical conflict. Which TWO selections are the best match? Choose TWO.
- Financial gain motivation
- Unskilled attacker
- Revenge motivation
- Insider threat
- War motivation
Correct Answers: D, E
Correct Answers
Answer D is correct because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally. This selection maps directly to one of the named needs. Unskilled attacker addresses an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions, so it does not satisfy the same slot.
Answer E is correct because War motivation means a goal connected to military or geopolitical conflict. This selection maps directly to one of the named needs. Financial gain motivation addresses a goal of directly or indirectly obtaining money, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because Financial gain motivation means a goal of directly or indirectly obtaining money. The fixed-count answer set is War motivation, Insider threat; this option does not fill one of those named functions. For example, Insider threat is required for a person with legitimate internal access who causes harm intentionally or accidentally.
Answer B is incorrect because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions. The fixed-count answer set is War motivation, Insider threat; this option does not fill one of those named functions.
Answer C is incorrect because Revenge motivation means a goal of retaliating against an individual or organization for a perceived grievance. The scenario calls for War motivation, Insider threat. Selecting this option would leave one of those required functions uncovered.
Question 19
Two requirements remain open in a threat-intelligence assessment: financially motivated criminal group that operates in a coordinated and often professional manner; technology deployed or used without formal approval or governance from the responsible IT or security organization. Which TWO options close those specific gaps? Choose TWO.
- Insider threat
- Organized crime
- Shadow IT
- Hacktivist
- Financial gain motivation
Correct Answers: B, C
Correct Answers
Answer B is correct because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner. This selection maps directly to one of the named needs. Hacktivist addresses an attacker motivated primarily by political, social, or ideological goals, so it does not satisfy the same slot.
Answer C is correct because Shadow IT means technology deployed or used without formal approval or governance from the responsible IT or security organization. This selection maps directly to one of the named needs. Financial gain motivation addresses a goal of directly or indirectly obtaining money, so it does not satisfy the same slot.
Incorrect Answers
Answer A is incorrect because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally. The question requires exactly 2 selections: Organized crime, Shadow IT. This option falls outside that required set. For example, Organized crime is required for a financially motivated criminal group that operates in a coordinated and often professional manner.
Answer D is incorrect because Hacktivist means an attacker motivated primarily by political, social, or ideological goals. The scenario calls for Organized crime, Shadow IT. Selecting this option would leave one of those required functions uncovered. For example, Organized crime is required for a financially motivated criminal group that operates in a coordinated and often professional manner.
Answer E is incorrect because Financial gain motivation means a goal of directly or indirectly obtaining money. The scenario calls for Organized crime, Shadow IT. Selecting this option would leave one of those required functions uncovered. For example, Shadow IT is required for technology deployed or used without formal approval or governance from the responsible IT or security organization.
Question 20
What is a goal of making systems or services unavailable or unreliable?
- Nation-state threat actor
- Service disruption motivation
- Insider threat
- Hacktivist
Correct Answer: B
Correct Answer
Answer B is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable. That is the function the question is testing. Nation-state threat actor would instead be used for a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.
Incorrect Answers
Answer A is incorrect because Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives. That concept can be valid in another scenario, but this question is testing a goal of making systems or services unavailable or unreliable; Service disruption motivation therefore fits the requirement more directly.
Answer C is incorrect because Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally. This could be appropriate elsewhere, but the required function is a goal of making systems or services unavailable or unreliable; that makes Service disruption motivation the precise choice.
Answer D is incorrect because Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals. The concept is valid, but it does not match this stem. The required function is a goal of making systems or services unavailable or unreliable, which maps to Service disruption motivation.
