Understanding Attacks

Which type of threat actor often has direct access to an organization’s internal systems?

• internal threat actor
• external threat actor
• social engineering
• exfiltration

Which category refers to systems that no longer receive updates or support from vendors?

• Unintentional Insider Threat
• Shadow IT
• Vulnerable Software
• Unsupported Systems

What category includes configurations that could potentially allow unauthorized access to the network?

• Unintentional Insider Threat
• Shadow IT
• Vulnerable Software
• Unsupported Systems

Who is likely to exploit vulnerabilities from outside the organization's network?

• internal threat actor
• external threat actor
• social engineering
• exfiltration

What type of threat actor might have advanced skills and tools to carry out complex attacks?

• Level of Sophistication/Capability
• script kiddie
• exfiltration

An attacker who uses phishing attacks and social engineering is often considered which type?

• external threat actor
• internal threat actor
• war driving
• phishing

What refers to the act of manipulating financial records for personal gain?

• employment
• internal actor
• fraud
• corporate america

Who is often considered a threat to computer systems, potentially stealing data or spreading malware?

• CTO
• CFO
• hacker
• IT

What is an ongoing cyber threat that maintains access to a network to exploit vulnerabilities over time?

• Intrusion prevention system
• Intrusion detection system
• Advanced Persistent Threat (APT)

Which category includes the risk of exposing sensitive information due to a user’s inadvertent actions?

• Unintentional Insider Threat
• Shadow IT
• Vulnerable Software
• Unsupported Systems