VendorsExamsEnterprise
Support
Request an ExamContact UsFAQ

NSE 1 - Information Security Awareness Free Sample Questions

12 free sample questions140 in the full practice test

Try simulator

NSE_1 Sample Questions

  1. Question 1

    Advanced

    The Bad Actors · Types of threat actors

    A Chief Information Security Officer (CISO) is classifying threat actors attacking the organization's financial infrastructure. The attackers are highly sophisticated, well-funded, use custom-developed zero-day exploits, and appear to be motivated by long-term espionage rather than immediate financial gain. Which category of threat actor does this profile best match?

    Answer and explanation

    Correct answer: D

    Nation-State actors (or State-Sponsored attackers) are characterized by high sophistication, substantial funding, and long-term goals such as espionage or political influence. They often develop custom zero-day exploits (Advanced Persistent Threats) unlike other groups.

  2. Question 2

    Beginner

    The Bad Actors · Motivations behind cyber attacks

    Which of the following motivations is primarily associated with 'Hacktivist' groups?

    Answer and explanation

    Correct answer: B

    Hacktivists are motivated by political, social, or ideological causes. They attack targets to promote a message, protest actions, or bring attention to a cause, rather than for direct financial gain.

  3. Question 3

    Intermediate

    The Bad Actors · Types of threat actors

    Review the diagram below depicting the sophistication versus resources of various threat actors. Which actor type best fits the description of 'Group C'—individuals with low technical skill who rely primarily on pre-written tools downloaded from the internet?

    quadrantChart title Threat Actor Landscape x-axis Low Resources --> High Resources y-axis Low Sophistication --> High Sophistication quadrant-1 Nation States quadrant-2 Organized Crime quadrant-3 Group C quadrant-4 Insiders "APT Groups": [0.9, 0.9] "Cyber Criminals": [0.7, 0.6] "Group C": [0.1, 0.1] "Hacktivists": [0.4, 0.5]
    Answer and explanation

    Correct answer: D

    Script Kiddies are characterized by low technical sophistication and resources. They rely on existing scripts and tools created by others to launch attacks, often for thrill or attention, rather than developing their own exploits.

  4. Question 4

    IntermediateMultiple answers

    The Bad Actors · Types of threat actors

    Select TWO primary characteristics that distinguish 'Organized Cybercrime' groups from other threat actors. (Select TWO)

    Answer and explanation

    Correct answers: A, C

    Organized cybercrime groups operate like businesses with a primary goal of generating profit through theft, extortion, or fraud.

    These groups often mirror legitimate corporate structures, with leaders, developers, money mules, and support staff, allowing them to scale operations efficiently.

  5. Question 5

    Intermediate

    The Bad Actors · Common attack methods and techniques

    Case Study: A large retail corporation experiences a breach where customer credit card data is stolen. Forensic analysis reveals the attackers used a 'spray and pray' technique, targeting thousands of organizations simultaneously with a generic ransomware variant. The attack did not seem targeted at this specific retailer's intellectual property. Based on this behavior, which threat actor is MOST likely responsible?

    Answer and explanation

    Correct answer: D

    Organized cybercriminals often use broad, non-targeted attacks (like 'spray and pray' ransomware or phishing campaigns) to maximize financial return with minimal effort. Their goal is monetization from as many victims as possible.

  6. Question 6

    Beginner

    The Bad Actors · Types of threat actors

    True or False: A 'Gray Hat' hacker is a security professional who hacks with malicious intent to steal data for financial gain.

    Answer and explanation

    Correct answer: B

    False. A 'Gray Hat' hacker operates in a moral gray area—they may violate laws or ethical standards to discover vulnerabilities but typically do not have malicious intent to steal or destroy data like a 'Black Hat' hacker. They often hack to improve security but without permission.

Register free for 6 more questions

Or unlock all 140 NSE_1 questions with explanations, timed mode and flashcards.

Related practice tests

All Fortinet practice exams