CompTIA Security+ SY0-701 Threat Actors and Motivations Practice Test

 

Topic 05 focuses on Threat Actors and Motivations for the CompTIA Security+ certification and the SY0-701 exam, using practical cybersecurity scenarios aligned to the published Security+ objectives. For broader exam preparation, review the CompTIA Security+ SY0-701 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

Which government-sponsored or government-aligned adversary often has significant resources, patience, and strategic objectives?

1. Nation-state threat actor
2. Service disruption motivation
3. Espionage motivation
4. War motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Nation-state threat actor means a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

Incorrect Answers

Answer B is incorrect because Service disruption motivation addresses a different requirement. Service disruption motivation refers to a goal of making systems or services unavailable or unreliable.

Answer C is incorrect because Espionage motivation would fit a different scenario. Espionage motivation refers to a goal centered on covertly obtaining sensitive government, military, business, or research information.

Answer D is incorrect because War motivation represents a different security function. War motivation refers to a goal connected to military or geopolitical conflict.

 

Question 2

To launch opportunistic attacks without deep technical expertise, which security approach should be selected?

1. Hacktivist
2. Unskilled attacker
3. Financial gain motivation
4. Revenge motivation

Correct Answer: B

 

Correct Answer

Answer B is correct because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Incorrect Answers

Answer A is incorrect because Hacktivist addresses a different security requirement. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer C is incorrect because Financial gain motivation would fit a different scenario. Financial gain motivation refers to a goal of directly or indirectly obtaining money.

Answer D is incorrect because Revenge motivation addresses a different requirement. Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance.

 

Question 3

What is an attacker motivated primarily by political, social, or ideological goals?

1. Hacktivist
2. Organized crime
3. Nation-state threat actor
4. Ideological motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Hacktivist means an attacker motivated primarily by political, social, or ideological goals.

Incorrect Answers

Answer B is incorrect because Organized crime would fit a different scenario. Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner.

Answer C is incorrect because Nation-state threat actor addresses a different requirement. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

Answer D is incorrect because Ideological motivation represents a different security function. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

 

Question 4

To abuse or misuse trusted access from inside an organization, which security approach should be selected?

1. War motivation
2. Insider threat
3. Data exfiltration motivation
4. Ideological motivation

Correct Answer: B

 

Correct Answer

Answer B is correct because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally.

Incorrect Answers

Answer A is incorrect because War motivation addresses a different security requirement. War motivation refers to a goal connected to military or geopolitical conflict.

Answer C is incorrect because Data exfiltration motivation would fit a different scenario. Data exfiltration motivation refers to a goal centered on stealing information from the target environment.

Answer D is incorrect because Ideological motivation addresses a different requirement. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

 

Question 5

Which financially motivated criminal group operates in a coordinated and often professional manner?

1. Unskilled attacker
2. Organized crime
3. Blackmail motivation
4. Data exfiltration motivation

Correct Answer: B

 

Correct Answer

Answer B is correct because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner.

Incorrect Answers

Answer A is incorrect because Unskilled attacker addresses a different requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Blackmail motivation would fit a different scenario. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer D is incorrect because Data exfiltration motivation represents a different security function. Data exfiltration motivation refers to a goal centered on stealing information from the target environment.

 

Question 6

To introduce unmanaged applications, services, or devices that bypass normal controls, which security approach should be selected?

1. Shadow IT
2. Unskilled attacker
3. Blackmail motivation
4. Financial gain motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Shadow IT means technology deployed or used without formal approval or governance from the responsible IT or security organization.

Incorrect Answers

Answer B is incorrect because Unskilled attacker addresses a different security requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Blackmail motivation addresses a different requirement. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer D is incorrect because Financial gain motivation would fit a different scenario. Financial gain motivation refers to a goal of directly or indirectly obtaining money.

 

Question 7

What is a goal centered on stealing information from the target environment?

1. Revenge motivation
2. Financial gain motivation
3. Data exfiltration motivation
4. Blackmail motivation

Correct Answer: C

 

Correct Answer

Answer C is correct because Data exfiltration motivation means a goal centered on stealing information from the target environment.

Incorrect Answers

Answer A is incorrect because Revenge motivation would fit a different scenario. Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance.

Answer B is incorrect because Financial gain motivation addresses a different requirement. Financial gain motivation refers to a goal of directly or indirectly obtaining money.

Answer D is incorrect because Blackmail motivation represents a different security function. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

 

Question 8

To collect strategic intelligence while avoiding detection, which security approach should be selected?

1. Espionage motivation
2. Hacktivist
3. Ideological motivation
4. Blackmail motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information.

Incorrect Answers

Answer B is incorrect because Hacktivist addresses a different requirement. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer C is incorrect because Ideological motivation addresses a different security requirement. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer D is incorrect because Blackmail motivation would fit a different scenario. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

 

Question 9

What is a goal of making systems or services unavailable or unreliable?

1. Insider threat
2. Hacktivist
3. Nation-state threat actor
4. Service disruption motivation

Correct Answer: D

 

Correct Answer

Answer D is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable.

Incorrect Answers

Answer A is incorrect because Insider threat would fit a different scenario. Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally.

Answer B is incorrect because Hacktivist represents a different security function. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer C is incorrect because Nation-state threat actor addresses a different requirement. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

 

Question 10

To force payment or behavior through leverage over the victim, which security approach should be selected?

1. Unskilled attacker
2. Blackmail motivation
3. Ideological motivation
4. Service disruption motivation

Correct Answer: B

 

Correct Answer

Answer B is correct because Blackmail motivation means a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Incorrect Answers

Answer A is incorrect because Unskilled attacker addresses a different requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Ideological motivation addresses a different security requirement. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer D is incorrect because Service disruption motivation would fit a different scenario. Service disruption motivation refers to a goal of making systems or services unavailable or unreliable.

 

Question 11

What is a goal of directly or indirectly obtaining money?

1. Financial gain motivation
2. Revenge motivation
3. Blackmail motivation
4. War motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Financial gain motivation means a goal of directly or indirectly obtaining money.

Incorrect Answers

Answer B is incorrect because Revenge motivation addresses a different requirement. Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance.

Answer C is incorrect because Blackmail motivation would fit a different scenario. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer D is incorrect because War motivation represents a different security function. War motivation refers to a goal connected to military or geopolitical conflict.

 

Question 12

To target organizations because of what they represent or support, which security approach should be selected?

1. Data exfiltration motivation
2. Ideological motivation
3. Hacktivist
4. Nation-state threat actor

Correct Answer: B

 

Correct Answer

Answer B is correct because Ideological motivation means a goal driven by philosophical, political, or social beliefs.

Incorrect Answers

Answer A is incorrect because Data exfiltration motivation addresses a different security requirement. Data exfiltration motivation refers to a goal centered on stealing information from the target environment.

Answer C is incorrect because Hacktivist addresses a different requirement. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer D is incorrect because Nation-state threat actor would fit a different scenario. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

 

Question 13

What is a goal of retaliating against an individual or organization for a perceived grievance?

1. Revenge motivation
2. Unskilled attacker
3. Insider threat
4. Blackmail motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Revenge motivation means a goal of retaliating against an individual or organization for a perceived grievance.

Incorrect Answers

Answer B is incorrect because Unskilled attacker would fit a different scenario. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Insider threat addresses a different requirement. Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally.

Answer D is incorrect because Blackmail motivation represents a different security function. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

 

Question 14

To degrade an adversary’s capabilities or support broader state objectives, which security approach should be selected?

1. Ideological motivation
2. Blackmail motivation
3. War motivation
4. Organized crime

Correct Answer: C

 

Correct Answer

Answer C is correct because War motivation means a goal connected to military or geopolitical conflict.

Incorrect Answers

Answer A is incorrect because Ideological motivation would fit a different scenario. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer B is incorrect because Blackmail motivation addresses a different requirement. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer D is incorrect because Organized crime addresses a different security requirement. Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner.

 

Question 15

To conduct espionage, disruption, or strategic campaigns with substantial capability, which security approach should be selected?

1. Hacktivist
2. Data exfiltration motivation
3. Nation-state threat actor
4. Espionage motivation

Correct Answer: C

 

Correct Answer

Answer C is correct because Nation-state threat actor means a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

Incorrect Answers

Answer A is incorrect because Hacktivist would fit a different scenario. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer B is incorrect because Data exfiltration motivation represents a different security function. Data exfiltration motivation refers to a goal centered on stealing information from the target environment.

Answer D is incorrect because Espionage motivation addresses a different security requirement. Espionage motivation refers to a goal centered on covertly obtaining sensitive government, military, business, or research information.

 

Question 16

What is an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions?

1. Hacktivist
2. Shadow IT
3. Unskilled attacker
4. Espionage motivation

Correct Answer: C

 

Correct Answer

Answer C is correct because Unskilled attacker means an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Incorrect Answers

Answer A is incorrect because Hacktivist represents a different security function. Hacktivist refers to an attacker motivated primarily by political, social, or ideological goals.

Answer B is incorrect because Shadow IT addresses a different requirement. Shadow IT refers to technology deployed or used without formal approval or governance from the responsible IT or security organization.

Answer D is incorrect because Espionage motivation addresses a different security requirement. Espionage motivation refers to a goal centered on covertly obtaining sensitive government, military, business, or research information.

 

Question 17

To use disruption, defacement, leaks, or publicity to advance a cause, which security approach should be selected?

1. Blackmail motivation
2. Unskilled attacker
3. Insider threat
4. Hacktivist

Correct Answer: D

 

Correct Answer

Answer D is correct because Hacktivist means an attacker motivated primarily by political, social, or ideological goals.

Incorrect Answers

Answer A is incorrect because Blackmail motivation would fit a different scenario. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer B is incorrect because Unskilled attacker addresses a different security requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Insider threat represents a different security function. Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally.

 

Question 18

What is a person with legitimate internal access who causes harm intentionally or accidentally?

1. Ideological motivation
2. War motivation
3. Unskilled attacker
4. Insider threat

Correct Answer: D

 

Correct Answer

Answer D is correct because Insider threat means a person with legitimate internal access who causes harm intentionally or accidentally.

Incorrect Answers

Answer A is incorrect because Ideological motivation represents a different security function. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer B is incorrect because War motivation addresses a different security requirement. War motivation refers to a goal connected to military or geopolitical conflict.

Answer C is incorrect because Unskilled attacker addresses a different requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

 

Question 19

To monetize fraud, ransomware, extortion, or stolen information, which security approach should be selected?

1. Ideological motivation
2. Financial gain motivation
3. Organized crime
4. Nation-state threat actor

Correct Answer: C

 

Correct Answer

Answer C is correct because Organized crime means a financially motivated criminal group that operates in a coordinated and often professional manner.

Incorrect Answers

Answer A is incorrect because Ideological motivation would fit a different scenario. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer B is incorrect because Financial gain motivation addresses a different security requirement. Financial gain motivation refers to a goal of directly or indirectly obtaining money.

Answer D is incorrect because Nation-state threat actor represents a different security function. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

 

Question 20

Which term describes technology deployed or used without formal approval or governance from the responsible IT or security organization?

1. War motivation
2. Ideological motivation
3. Unskilled attacker
4. Shadow IT

Correct Answer: D

 

Correct Answer

Answer D is correct because Shadow IT means technology deployed or used without formal approval or governance from the responsible IT or security organization.

Incorrect Answers

Answer A is incorrect because War motivation addresses a different security requirement. War motivation refers to a goal connected to military or geopolitical conflict.

Answer B is incorrect because Ideological motivation represents a different security function. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer C is incorrect because Unskilled attacker addresses a different requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

 

Question 21

To obtain valuable data for sale, leverage, intelligence, or competitive advantage, which security approach should be selected?

1. Insider threat
2. Revenge motivation
3. Data exfiltration motivation
4. Service disruption motivation

Correct Answer: C

 

Correct Answer

Answer C is correct because Data exfiltration motivation means a goal centered on stealing information from the target environment.

Incorrect Answers

Answer A is incorrect because Insider threat would fit a different scenario. Insider threat refers to a person with legitimate internal access who causes harm intentionally or accidentally.

Answer B is incorrect because Revenge motivation addresses a different security requirement. Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance.

Answer D is incorrect because Service disruption motivation represents a different security function. Service disruption motivation refers to a goal of making systems or services unavailable or unreliable.

 

Question 22

What is a goal centered on covertly obtaining sensitive government, military, business, or research information?

1. Ideological motivation
2. Unskilled attacker
3. Organized crime
4. Espionage motivation

Correct Answer: D

 

Correct Answer

Answer D is correct because Espionage motivation means a goal centered on covertly obtaining sensitive government, military, business, or research information.

Incorrect Answers

Answer A is incorrect because Ideological motivation addresses a different security requirement. Ideological motivation refers to a goal driven by philosophical, political, or social beliefs.

Answer B is incorrect because Unskilled attacker addresses a different requirement. Unskilled attacker refers to an attacker with limited original capability who often relies on publicly available tools, scripts, or instructions.

Answer C is incorrect because Organized crime represents a different security function. Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner.

 

Question 23

To interrupt business operations rather than primarily stealing information, which security approach should be selected?

1. Nation-state threat actor
2. Financial gain motivation
3. Espionage motivation
4. Service disruption motivation

Correct Answer: D

 

Correct Answer

Answer D is correct because Service disruption motivation means a goal of making systems or services unavailable or unreliable.

Incorrect Answers

Answer A is incorrect because Nation-state threat actor represents a different security function. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

Answer B is incorrect because Financial gain motivation would fit a different scenario. Financial gain motivation refers to a goal of directly or indirectly obtaining money.

Answer C is incorrect because Espionage motivation addresses a different security requirement. Espionage motivation refers to a goal centered on covertly obtaining sensitive government, military, business, or research information.

 

Question 24

What is a goal of coercing a victim by threatening disclosure, damage, or other harmful action?

1. Blackmail motivation
2. Service disruption motivation
3. Organized crime
4. Revenge motivation

Correct Answer: A

 

Correct Answer

Answer A is correct because Blackmail motivation means a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Incorrect Answers

Answer B is incorrect because Service disruption motivation addresses a different requirement. Service disruption motivation refers to a goal of making systems or services unavailable or unreliable.

Answer C is incorrect because Organized crime addresses a different security requirement. Organized crime refers to a financially motivated criminal group that operates in a coordinated and often professional manner.

Answer D is incorrect because Revenge motivation represents a different security function. Revenge motivation refers to a goal of retaliating against an individual or organization for a perceived grievance.

 

Question 25

To steal funds, commit fraud, demand ransom, or sell access and data, which security approach should be selected?

1. Nation-state threat actor
2. Financial gain motivation
3. Blackmail motivation
4. War motivation

Correct Answer: B

 

Correct Answer

Answer B is correct because Financial gain motivation means a goal of directly or indirectly obtaining money.

Incorrect Answers

Answer A is incorrect because Nation-state threat actor represents a different security function. Nation-state threat actor refers to a government-sponsored or government-aligned adversary that often has significant resources, patience, and strategic objectives.

Answer C is incorrect because Blackmail motivation addresses a different security requirement. Blackmail motivation refers to a goal of coercing a victim by threatening disclosure, damage, or other harmful action.

Answer D is incorrect because War motivation would fit a different scenario. War motivation refers to a goal connected to military or geopolitical conflict.