nerdexam
GIAC

GSLC · Question #55

Which of the following statements correctly defines a script kiddie?

The correct answer is A. He is an individual who uses hacking programs developed by others to attack information systems. A script kiddie is defined by the use of pre-built hacking tools and scripts created by others, relying on those tools without understanding or developing the underlying exploitation techniques.

Security Program Management & Governance

Question

Which of the following statements correctly defines a script kiddie?

Options

  • AHe is an individual who uses hacking programs developed by others to attack information systems
  • BHe is an individual who is an expert in various computer fields such as operating systems,
  • CHe is an individual who breaks communication systems to perform hacking.
  • DHe is an individual who has lost respect and integrity as an employee in any organization.

How the community answered

(29 responses)
  • A
    86% (25)
  • B
    3% (1)
  • C
    7% (2)
  • D
    3% (1)

Why each option

A script kiddie is defined by the use of pre-built hacking tools and scripts created by others, relying on those tools without understanding or developing the underlying exploitation techniques.

AHe is an individual who uses hacking programs developed by others to attack information systemsCorrect

Script kiddies lack original programming skills or deep technical knowledge and depend entirely on ready-made exploit frameworks, automated attack tools, and scripts authored by skilled hackers. Despite their limited understanding, they remain a real threat because widely available tools lower the barrier to launching attacks against vulnerable systems.

BHe is an individual who is an expert in various computer fields such as operating systems,

Describing someone as an expert in operating systems and multiple computer fields defines a skilled hacker or security researcher, which is the opposite of a script kiddie who lacks original technical expertise.

CHe is an individual who breaks communication systems to perform hacking.

Breaking communication systems to perform hacking aligns with the definition of a phreaker - someone who exploits telephone or telecommunications infrastructure - not a script kiddie.

DHe is an individual who has lost respect and integrity as an employee in any organization.

An individual who has lost respect and integrity in an organization describes an insider threat or disgruntled employee, a completely separate threat actor category from a script kiddie.

Concept tested: Script kiddie threat actor definition

Source: https://csrc.nist.gov/glossary/term/script_kiddie

Topics

#threat actors#script kiddie#attacker types#hacking tools

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSLC Practice