Which of the following threat actors would most likely target an organization by using a logic bomb within an internally-developed application?
Trusted insider is the most likely threat actor to use a logic bomb within an internally-developed application.
Trusted insiders have intimate knowledge of an organization’s systems and applications, allowing them to embed malicious code like a logic bomb within software that they help develop or maintain. This insider access makes it easier for them to conceal their activities and execute an attack without raising immediate suspicion.
Nation-state actors typically engage in sophisticated cyber espionage or attacks targeting critical infrastructure. While they may use various methods to achieve their goals, logic bombs are more often utilized by someone with direct access and knowledge of internal systems, which is less characteristic of nation-state operations that usually focus on broader strategic objectives rather than individual applications.
Organized crime groups often pursue financial motives through methods such as ransomware or data theft. While they may employ various tactics to compromise systems, they generally do not have the same level of insider access to an organization’s internal applications as a trusted insider would. Their operations are typically more opportunistic rather than methodical embedding of malicious code in proprietary software.
Hacktivists are usually driven by ideological motives and focus on public demonstrations or disruptions rather than subtle, hidden attacks like logic bombs. Their tactics often involve defacing websites or leaking information rather than compromising internal applications, which requires insider knowledge and access that they typically do not possess.
The threat of a logic bomb within an internally-developed application is most realistically posed by a trusted insider, who possesses the necessary access and understanding of the system. Other threat actors, such as nation-states, organized crime groups, and hacktivists, operate under different motives and methods that do not align with the stealthy nature of deploying such a specific type of malicious code.
Related Questions
View allAfter a security awareness training session, a user called the IT help...
Which of the following is an example of a certificate that is generate...
Which of the following is a risk of conducting a vulnerability assessm...
Which of the following types of vulnerabilities involves attacking a s...
After a security incident, a systems administrator asks the company to...
Related Quizzes
View allCompTIA A Plus Certification Exam
CompTIA A Plus Exam Questions
CompTIA A Plus 1001 Exams Practice
CompTIA A Plus Practice Exam
CompTIA CySA+ Cybersecurity Analyst Certification all in One Exam Guide
CompTIA Network Plus Certification Exam Quiz
CompTIA Security Plus Exam Answers
Free CompTIA Security Plus Practice Test
CompTIA Security Plus 501 Practice Questions
CompTIA Security Plus Example Questions
- ✓ 500+ Practice Questions
- ✓ Detailed Explanations
- ✓ Progress Analytics
- ✓ Exam Simulations