CompTIA Security+ (SY0-701)Threats, Vulnerabilities, and MitigationsEasy

A group defaces a government agency's website and replaces the homepage with a political manifesto protesting a new law. No data is stolen, and the group publicly claims responsibility on social media. Which type of threat actor is most likely responsible?

  1. ANation-state actor
  2. BOrganized crime group
  3. CHacktivist
  4. DInsider threat
Show answer & explanation

Correct answer: C. Hacktivist

Hacktivists are motivated by political or social causes and often deface websites or leak information to draw attention to a cause, then publicly claim credit. Organized crime seeks financial gain, nation-states seek strategic advantage covertly, and insiders already have authorized access.

Why the other options are wrong

  • A. Wrong: nation-states typically avoid public claims to preserve deniability.
  • B. Wrong: financially motivated, not ideologically driven.
  • D. Wrong: insiders act from within, not through public website defacement.

Hacktivist

A threat actor who attacks systems to promote a political, social, or ideological cause rather than for financial gain.

  • Often defaces websites or leaks data to embarrass targets
  • Publicly claims responsibility to gain attention
  • Motivation is ideology, not profit

Memory trick: Hacktivists shout their cause, not their bank account.

More Threats, Vulnerabilities, and Mitigations questions