Certmaster CySa+ Lesson 2
nation-states - ANS-A type of threat actor that is supported by the resources of its host
country's military and security services.
organized crime - ANS-A type of threat actor that uses hacking and computer fraud for
commercial gain.
hacktivist - ANS-A threat actor that is motivated by a social issue or political cause.
insider threat - ANS-Type of threat actor who is assigned privileges on the system and
causes an intentional or unintentional incident.
script kiddie - ANS-An inexperienced, unskilled attacker that typically uses tools or
scripts created by others.
advanced persistent threat (APT) - ANS-An attacker's ability to obtain, maintain, and
diversify access to network systems using exploits and malware.
virus - ANS-Malicious code inserted into an executable file image. The malicious code is
executed when the file is run and can deliver a payload, such as attempting to infect
other files.
Trojan - ANS-A malicious software program hidden within an innocuous-seeming piece
of software. Usually, the Trojan is used to try to compromise the security of the target
computer.
command and control (C&C or C2) - ANS-Infrastructure of hosts and services with
which attackers direct, distribute, and control malware over botnets.
exploits - ANS-A specific method by which malware code infects a target host, often via
some vulnerability in a software process.
Metasploit - ANS-A platform for launching modularized attacks against known software
vulnerabilities.
persistence - ANS-In cybersecurity, the ability of a threat actor to maintain covert access
to a target host or network.
nation-states - ANS-A type of threat actor that is supported by the resources of its host
country's military and security services.
organized crime - ANS-A type of threat actor that uses hacking and computer fraud for
commercial gain.
hacktivist - ANS-A threat actor that is motivated by a social issue or political cause.
insider threat - ANS-Type of threat actor who is assigned privileges on the system and
causes an intentional or unintentional incident.
script kiddie - ANS-An inexperienced, unskilled attacker that typically uses tools or
scripts created by others.
advanced persistent threat (APT) - ANS-An attacker's ability to obtain, maintain, and
diversify access to network systems using exploits and malware.
virus - ANS-Malicious code inserted into an executable file image. The malicious code is
executed when the file is run and can deliver a payload, such as attempting to infect
other files.
Trojan - ANS-A malicious software program hidden within an innocuous-seeming piece
of software. Usually, the Trojan is used to try to compromise the security of the target
computer.
command and control (C&C or C2) - ANS-Infrastructure of hosts and services with
which attackers direct, distribute, and control malware over botnets.
exploits - ANS-A specific method by which malware code infects a target host, often via
some vulnerability in a software process.
Metasploit - ANS-A platform for launching modularized attacks against known software
vulnerabilities.
persistence - ANS-In cybersecurity, the ability of a threat actor to maintain covert access
to a target host or network.
