Exam CS0-003 topic 1 question 61 discussion

C) Insider threat. Insider threats can be on purpose or accidentally. Regardless, it originated as a result someone inside the organization (employee) did.

This is another poorly worded question by CompTIA. It uses 3 seperate references that indicate an APT (infect eventually), skid (s/w that includes mal code), and insider threat (dls software that eventually infects others). They're trying to be clever, but it's just setting people up for failure.

C) insider threat. Script kiddies are inexperienced individuals who use pre-written scripts or tools to hack into systems without fully understanding the underlying technology. The user in this scenario is not actively hacking but rather a victim of malware infection.

This was acquired then transferred; Script Kiddies do exactly that. This would have been C), HAD there been any indication it was a user of an organization. with him being called "User" all that means is END-USER - a host on the network. Who's to say he wasn't a user on the library/coffee shop network??? look for specifics.

C for sure!

I voted D

User download a virus and the virus spread to over systems by clicking on a link. I am guessing 'effecting other systems' means it is an organization which has multiple systems, and 'user' is an employee in this case; thus 'insider threat.' I doubt it if it's a script kiddie.. Answer = insider threat.

C. Insider threat An insider threat refers to a person within an organization who represents a potential security risk due to their knowledge of, and access to, sensitive information and systems. In this case, the user is considered an insider because they are part of the organization and have initiated a threat by introducing malware. The action might be intentional or unintentional, but the term "insider threat" encompasses individuals within the organization who pose a risk to its security.

Anything USER related is insider threat

In this scenario, the user, whether intentionally or unintentionally, poses a threat to the organization's security by facilitating the spread of malware from within the organization. This type of threat is categorized as an insider threat because it originates from someone with legitimate access to the organization's systems.

it should be D as nothing specifies the location of user to be internal

In my opinion, it is that the Kides script is not a real answer because it did not give us a clear scenario for someone who works in a company and downloaded something and did not explain to us if he knew or intended for his act, so I see that we exclude Kiddy because Kiddy is known to be foolish people who do not know how to create malicious programs as a forward and educated hacker and who knows how to create languages, this is a correct and logical answer that is an internal threat. We must judge questions with logic that we learned in Security Plus, my friends.

Official answer is Script Kiddy. Really?!? No way, the correct answer is (involuntay) Insider Threat. Nothing in the question leads to believe this is a script kiddy, whici is voluntary by nature.

C. Insider Threat An insider threat is a security risk that originates within the organization itself. Insider threats can be unintentional or intentional. In this case, the user downloaded software containing malware, which led to the infection of other systems within the organization. Even if the user did not intend to cause harm, their actions resulted in a security incident, making them an unintentional insider threat.

The user who downloads software containing malware onto a computer and inadvertently infects numerous other systems is most likely: C. Insider threat Explanation: An insider threat refers to a person within an organization (in this case, the user) who poses a threat to the organization's security. Insider threats can be unintentional, such as when a user unknowingly downloads and spreads malware.

Insider Threat

Correct answer is C