SSCP · Question #1300
Insiders have a clear advantage in committing computer crime. Which two of the following do they possess? (Choose two)
The correct answer is D. Means E. Opportunity. Insiders possess inherent advantages in committing computer crime, primarily their authorized access (means) and existing knowledge of systems and vulnerabilities (opportunity).
Question
Insiders have a clear advantage in committing computer crime. Which two of the following do they possess? (Choose two)
Options
- AAdvantage
- BMotive
- COutside connections
- DMeans
- EOpportunity
- FTools
How the community answered
(24 responses)- A4% (1)
- C4% (1)
- D92% (22)
Why each option
Insiders possess inherent advantages in committing computer crime, primarily their authorized access (means) and existing knowledge of systems and vulnerabilities (opportunity).
Advantage is too generic and is the premise of the question, not a specific thing an insider possesses.
Motive is a psychological driver, not an inherent advantage an insider possesses over external attackers in terms of access or opportunity.
Outside connections are not an inherent advantage granted solely by insider status; they might be relevant for some crimes but are not a universal insider advantage.
Insiders often have the 'means' because they are granted legitimate access to company systems, networks, and data, and may possess specialized knowledge of internal processes and vulnerabilities, allowing them to execute attacks effectively.
Insiders typically have 'opportunity' due to their authorized presence within the organization, which allows them to bypass external security measures and exploit internal weaknesses without immediate suspicion, making their malicious actions harder to detect.
While insiders may use tools, 'tools' themselves are not the unique advantage an insider possesses; it's their access and knowledge (means and opportunity) that make specific tools effective for them.
Concept tested: Insider advantages in cybercrime
Source: https://www.cisa.gov/topics/organizational-resilience/insider-threat
Topics
Community Discussion
No community discussion yet for this question.