Threat Actor

Question 1

Unskilled Attackers

Answer 1

Limited tech experience use pre scripts online to attack.

Question 2

Hacktivist

Answer 2

Attacks that are politiacl

Question 3

Organized Crime

Answer 3

Ransome ware, financial gain

Question 4

Nation-State Actors

Answer 4

They do espinoge

Question 5

Insider Threats

Answer 5

Inside the company.

Question 6

Honeypots

Answer 6

Decoy systems.servers designed to attract attackers.

Question 7

Honeynets

Answer 7

Entire network that is fake.

Question 8

Honeyfiles

Answer 8

Fake files.

Question 9

HoneyTokens

Answer 9

Fake credintals.

Question 10

Data Exfiltation

Answer 10

Unauthorized transfer of data.

Question 11

Internal Threat Actors

Answer 11

Insiders that are bad.

Question 12

Extranal Threat Actors

Answer 12

Outsiders who are attempting to breach into the system.

Question 13

Resource and funding

Question 14

Unskilled Attackers

Answer 14

An individual that lack technical knowledge that relys on scrips.AKA script kiddies.

Question 15

Hacktivists

Answer 15

Use skills to promote a cause or drive for social change.

Question 16

Organized Crime

Answer 16

Well structured entities that leverage resources and tech skills for illicit gain.

Question 17

Nation-State Actor

Answer 17

Groups that are sponsored by government to attack nations, and governments etc.

Question 18

Advance Persistent Threat

Answer 18

Used with a nation state actor. Prolonged cyber attack.

Question 19

Insider Threats

Answer 19

Originates from within the org.

Question 20

Shadow IT

Answer 20

Use of IT systems without explicit approval.

Question 21

Threat Vector

Answer 21

Pathway by which an attacker can gain unauthorized access to a computer or network sending malicious payloads.

Question 22

Outsmarting Threat Actors

Question 23

HoneyToken

Answer 23

A honeytoken is a piece of information or a system entity that is created to serve as a decoy or alert mechanism. A honeytoken’s sole purpose is to be accessed or used illicitly, and any interaction with it is typically a clear sign of unauthorized activity, such as someone using a fake user account, a dummy email address, or a baited record in a database. It alerts the organization that someone has accessed the system.