Identifying Threat Actors Using Zero-Day Exploits
Which of the following threat actors is most likely to use a high level of sophistication and potentially zero-day exploits to target organizations and systems?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests your ability to map threat actor characteristics to their capabilities, specifically recognizing that only nation-state or well-funded criminal groups can afford zero-day research.
Advanced Persistent Threat (APT) groups are the threat actors most likely to utilize high sophistication and zero-day exploits. This question distinguishes APTs from less skilled actors based on resource availability and objectives.
Learners often confuse Hacktivists with APTs because both target organizations, but Hacktivists typically use known vulnerabilities for political statements rather than developing new exploits.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Advanced Persistent Threat (APT) groups are highly sophisticated, well-resourced adversaries, often sponsored by nation-states. They possess the financial resources and technical talent required to discover, develop, or purchase zero-day exploits before vendors can patch them. Their primary goal is long-term espionage or data theft, which justifies the high cost of using unrevealed vulnerabilities.Why the Other Options Are Wrong
Script kiddies lack the technical skills to create or effectively use zero-days, relying instead on pre-packaged tools. Hacktivists are motivated by ideology and usually exploit known flaws to make a statement, not to conduct stealthy, long-term operations. Ethical hackers are authorized professionals who find vulnerabilities to fix them, not to target systems maliciously.Community Comment Notes
Community consensus strongly supports option A. Learners noted that "APTs are well-resourced and organized adversaries" capable of such attacks. One user clarified that while hacktivists are political, they do not typically engage in the same level of technical sophistication as state-sponsored actors.Official Reference
Exam Strategy
When identifying threat actors, look for keywords like 'well-funded', 'nation-state', 'espionage', or 'zero-day' to identify APTs. Contrast these with 'ideology' (Hacktivists) or 'low skill/tools' (Script Kiddies).
Frequently Asked Questions
Can Hacktivists use zero-day exploits?
While possible, it is rare. Hacktivists typically prioritize speed and visibility over stealth, so they prefer using known, easily exploitable vulnerabilities to achieve their political goals quickly.
What defines an Advanced Persistent Threat?
An APT is defined by its persistence (long-term presence), advanced techniques (like zero-days), and specific objectives (usually espionage or data theft) often backed by nation-state resources.