Which Threat Actor Would a Foreign Government Hire?

SY0-701 By islever Editorial Last updated

Compare and contrast common threat actors and motivations.

Short answer

C Organized crime is the threat actor most likely to be hired by a foreign government to attack critical systems in other countries.

Question

Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?
  1. Hacktivist
  2. Whistleblower
  3. Organized crime Correct Answer
  4. Unskilled attacker

Key Takeaways

The exam tests threat-actor motivation and capability — only an actor that sells its skills for money can be hired, and the trap is choosing the hacktivist because the target sounds political.

This SY0-701 scenario asks which threat actor a foreign government would pay to attack critical systems in another country, and the answer is organized crime. The page explains why the profit-driven, well-resourced criminal enterprise — not a hacktivist, a whistleblower or an unskilled attacker — matches the contractual 'hired' wording.

Common mistake: Many learners choose hacktivist (A) because an attack on another country's critical systems sounds politically motivated, but hacktivists act on their own ideology and do not accept government contracts.

Expert Analysis

Why the Answer Is Correct

Security+ classifies threat actors by motivation, and the operative word in the stem is "hired": the state is buying offensive capability rather than providing it. Organized crime is the only listed actor that operates as a paid, profit-seeking enterprise with the funding, tooling and skilled personnel needed to sustain attacks against critical infrastructure abroad. Contracting a criminal syndicate also gives the sponsoring government a degree of plausible deniability, since the intrusion is not tied to state-owned infrastructure or a uniformed operator. As lauren2wright notes, such groups "have the resources, expertise, and networks to carry out sophisticated" campaigns for governments or other clients, which is precisely the relationship the scenario describes.

Why the Other Options Are Wrong

A hacktivist is ideologically driven and pursues a personal or group cause, so a foreign government cannot simply purchase their allegiance; the 28 votes for A come from reading "attacks other countries" as political rather than contractual. A whistleblower is an insider who exposes wrongdoing, not an external attacker for hire, and the label describes a disclosure role rather than an offensive capability. An unskilled attacker relies on downloaded scripts and commodity tools and lacks the persistence, operational security and budget required to threaten critical systems across borders. Only organized crime combines commercial availability with the sophistication the scenario demands.

Community Comment Notes

Most commenters converge on C. way12 reasons that "the question points to a collection of attackers that is organized" and that they are targeting governments, while otose credits organized crime with "organized high skilled persdonnel" who can be pointed at a client's target. Rashjr1 emphasizes that with organized crime actors "they are always there for monetary gain", which is exactly the payment link the stem implies, and Anyio adds that governments "might collaborate with or hire these groups" for espionage and sabotage of another nation's critical systems. One comment from PatientZero is about the site's pricing rather than the question and contains no technical claim, so it carries no weight in deciding the answer.

Official Reference

https://www.comptia.org/certifications/security

This link opens the official vendor documentation in a new tab.

Exam Strategy

Anchor on the verb in the stem: "hired" describes a paid relationship, which immediately rules out ideology-driven and amateur actors before you even compare capability. Then confirm that your chosen actor's motive — money — and resources map onto the described target set of critical systems in other countries.

Frequently Asked Questions

Why isn't a hacktivist the actor a foreign government would hire?

Hacktivists act on personal ideology rather than for pay, so a state cannot contract them; they select targets they object to instead of accepting money to hit critical infrastructure.

Where do nation-state actors fit if they aren't listed as an option?

Nation-states are government-sponsored by definition, so when a state outsources an attack abroad it typically uses proxies such as organized crime groups, which provide skill and plausible deniability.

More SY0-701 FAQ →

Community Votes

C
72%
A
28%

72% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 20 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 20

  1. lauren2wright 👍 14
    C. Organized crime Organized crime groups often have the resources, expertise, and networks to carry out sophisticated cyber attacks on behalf of governments or other entities for financial gain or political motives.
  2. PatientZero 👍 7 Answered A
    this website has become incredibly overpriced. Was able to buy contributor's access before now it's not even worth it. 3 months for 150?
  3. Anyio 👍 3
    The answer is C. Organized crime. Organized crime groups are often well-funded, highly skilled, and capable of carrying out sophisticated cyberattacks, including those targeting critical infrastructure. Governments might collaborate with or hire these groups for cyber espionage, sabotage, or other malicious activities aimed at destabilizing or compromising another nation's critical systems. Hacktivists typically act independently for political or social reasons and are less likely to be directly hired by governments. Whistleblowers expose internal wrongdoings and are not typically involved in attacking external systems. Unskilled attackers (often referred to as "script kiddies") lack the expertise necessary for carrying out complex attacks on critical systems. Thus, organized crime groups are the most likely threat actors in this scenario.
  4. ermahasra 👍 3 Answered C
    C. Organized crime In the context of CompTIA Security+, organized crime refers to structured groups that are engaged in illegal activities, typically for financial gain. These groups are often highly sophisticated, well-funded, and operate with a high degree of coordination. They may be involved in various forms of cybercrime, including: Fraud: Engaging in activities such as credit card fraud, identity theft, and financial scams. Ransomware Attacks: Encrypting data and demanding a ransom for the decryption key. Data Breaches: Stealing sensitive information from organizations to sell on the black market or use for further criminal activities. Money Laundering: Using various techniques to disguise the origins of illegally obtained money. Drug Trafficking: Using online platforms to facilitate the sale and distribution of illegal drugs.
  5. way12 👍 2 Answered C
    the question points to a collection of attackers that is organized and they are targeting governments
Show 15 more comments
  1. Cyberfox9001 👍 1 Answered C
    C. Organized Crime Organized crime consists of individuals who have gained experience and made careers out of organized crime. In this case, organizations who are recruiting hackers would feel more comfortable recruiting groups who are experienced in this area of technology.
  2. Elyo 👍 1 Answered C
    Organized crime is a category of transnational, national, or local groups of centralized enterprises run to engage in illegal activity, most commonly for profit.
  3. AryzBeats 👍 1 Answered C
    Organized crime are usually treat actors that have high skill, capable of carrying out long and technical attacks
  4. Hasss 👍 1 Answered C
    Organized crimes usually have a sophisticated team capable enough to pull of threats like these.
  5. NateF 👍 1 Answered C
    Interesting answer usually in the threat actor list Nation-State actor would be the answer.
  6. Rashjr1 👍 1 Answered C
    because with an organised crime threat actor they are always there for monetary gain
  7. enongenek 👍 1 Answered C
    Organise crime as they have the resources and can work for foreign government
  8. JRCHENRY 👍 1 Answered C
    these threat actors are highly skilled and works closely with their goverment
  9. id1setiawabs 👍 1
    yeah, its C. the are very smooth and very organized when doing their job
  10. otose 👍 1 Answered C
    organized crime because it purely organized high skilled persdonnel
  11. simmy55 👍 1 Answered C
    I think that should be option C Thanks to P A S S 4 S U R E H U B
  12. SHAGZZ 👍 1 Answered C
    the most accurate would have been APT
  13. xidal 👍 1
    Answer (C) is the right.
  14. hobad 👍 1 Answered C
    C is correct answer
  15. 88d4601 👍 1 Answered C
    The answers is C

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

CCTV and Surveillance Signs as Security Controls

S-grade

When Should an Engineer Decommission a Network Device?

S-grade

Which Controls Secure Remote Access to Sensitive PHI Applications?

S-grade

Which Zero Trust Component Belongs to the Data Plane?

S-grade

Practice All SY0-701 Questions

Access 100 questions with complete answers and detailed explanations.

View Full SY0-701 Practice Test →

← Back to SY0-701 Study Guide