CompTIA Security+ (SY0-701)Threats, Vulnerabilities, and MitigationsEasy
A 16-year-old downloads a freely available exploit toolkit from an online forum and uses it to deface a small business website without fully understanding how the underlying exploit code works. Which type of threat actor best describes this individual?
- AScript kiddie
- BAdvanced persistent threat
- CNation-state actor
- DInsider threat
Show answer & explanationAnswer & explanation
Correct answer: A. Script kiddie
A script kiddie uses pre-written tools or scripts created by others to launch attacks, typically for notoriety or amusement, without deep technical knowledge. The scenario describes low skill and reliance on a downloaded toolkit, which is the defining trait of this actor type.
Why the other options are wrong
- B. APTs are highly skilled, well-funded, and persistent, not casual toolkit users.
- C. Nation-states have significant resources and sophisticated custom tooling.
- D. An insider threat has authorized access to the target organization, unlike this outside attacker.
Script Kiddie
A low-skill attacker who uses pre-made hacking tools or scripts without understanding the underlying mechanics.
- Motivated by curiosity, notoriety, or thrill-seeking
- Relies on publicly available exploit kits
- Low sophistication but can still cause real damage
Memory trick: Script kiddie: 'copy-paste hacker' with a rented toolkit.