Exam SY0-601 topic 1 question 142 discussion

going to jail..lol

An insider threat is anyone who has legitimate access to an organization’s internal resources. Common security issues caused by insider threats include loss of confidentiality, integrity, and availability of the organization’s assets. The extent of the threat depends on how much access the insider has. For example, an administrator would have access to many more IT systems than a regular user. Malicious insiders have a diverse set of motivations. For example, some malicious insiders are driven by greed and simply want to enhance their finances, while others want to exact revenge on the organization. They may steal files that include valuable data, install or run malicious scripts, or redirect funds to their personal accounts.

Answer is A...I also think Data Breach also qualifies but not as strongly as Insider Threat.

He bold lmao

The action described in the scenario involves an employee of the medical billing company who abused their authorized access to the system to download customer records and manipulate direct deposit information for fraudulent purposes. This behavior is considered an insider threat because it involves a trusted individual within the organization using their access privileges to perform unauthorized and malicious actions. Insider threats are a significant concern for organizations as they can pose a serious risk to data security and privacy.

In this scenario, the employee of the medical billing company downloaded customer records and manipulated direct deposit information for personal gain. This type of action represents an insider threat, which refers to potential risks posed to an organization by its own employees, contractors, or other trusted individuals who have access to sensitive information and systems. The insider threat is a significant concern for organizations, and it's essential to implement proper security measures and monitoring to detect and prevent such malicious activities.

Question is asking about Action so it is Data Breach. Answer D is correct.

It is A, company employee = insider threat

A - Insider Threat

Insider threat is the potential for an insider to use their authorized access or understanding of an organization to harm that organization