FirstTry

Objective 2.1

SY0-701

Compare and contrast common threat actors and motivations

Objective 2.1 sits in Threats, Vulnerabilities, and Mitigations, which carries 22% of the Security+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-1Threats, Vulnerabilities, and Mitigations

Which term describes an unsanctioned application or cloud service that employees adopt without approval from the IT department?

Hacktivist group carrying out attacks for a political or ideological causeHacktivist describes motivation, not unauthorized technology adoption.
Insider threat exploiting legitimate access for personal gainInsider threat involves misuse of authorized access, not merely unapproved tools.
Shadow IT deployment created without official IT department approvalCorrect · your answerCorrect: matches the definition of unauthorized, unapproved technology.
Unskilled attacker using downloaded scripts with minimal expertiseUnskilled attacker describes an external actor's skill level, not internal tool sanctioning.

Correct.

Checked against nvlpubs.nist.gov, August 2026

Concept

Shadow IT refers to unapproved technology used within an organization.

Why C

Shadow IT specifically describes systems or apps deployed without IT department knowledge or approval.

Source

The term “shadow IT” typically denotes staff members’ work-related use of IT-related hardware, software, or cloud services without the knowledge of the IT organization. The canonical example of shadow IT is a department that performs mission-critical work using an independently purchased server running software that is not approved, managed, or even known by the larger IT organization.

Microsoft Learn: Azure threat detection, checked August 2026
#threat-actors#shadow-it

Now you: objective 2.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-1Threats, Vulnerabilities, and Mitigations

Defender for SQL flags a database administrator with valid credentials copying and exporting customer records shortly before resigning. Which threat actor category best fits?

Sample question 2 of 3

2-1Threats, Vulnerabilities, and Mitigations

Azure Firewall's threat intelligence feed blocks traffic from an IP address tied to a group harvesting stolen credit card numbers to resell on underground markets. Which motivation best explains the attack?

Sample question 3 of 3

2-1Threats, Vulnerabilities, and Mitigations

An organization is targeted by an adversary that is well resourced and sustains continuous, coordinated intrusions over several years. Which threat actor type best matches this profile?

That’s 3 of the full Security+ bank.

Keep going free: 10 questions per certification in bank practice, with no account.

Continue practicing

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Threats, Vulnerabilities, and Mitigations