CompTIA CySA+ (CS0-003) — Question 28

An analyst receives threat intelligence regarding potential attacks from an actor with seemingly unlimited time and resources. Which of the following best describes the threat actor attributed to the malicious activity?

Answer options

• A. Insider threat
• B. Ransomware group
• C. Nation-state
• D. Organized crime

Correct answer: C

Explanation

The correct answer is C, Nation-state, as these actors often have substantial resources and time to conduct operations, unlike other groups. Insider threats typically involve individuals within an organization, ransomware groups focus on financial gain through encryption, and organized crime may have resources but usually do not match the capabilities of a nation-state.