CompTIA PenTest+ (PT0-001) — Question 145

Which of the following actions BEST matches a script kiddie's threat actor?

Answer options

• A. Exfiltrate network diagrams to perform lateral movement.
• B. Steal credit cards from the database and sell them in the deep web.
• C. Install a rootkit to maintain access to the corporate network.
• D. Deface the website of a company in search of retribution.

Correct answer: B

Explanation

The correct answer, B, describes the typical behavior of a script kiddie who exploits existing tools to steal and sell credit card information. Options A and C involve more sophisticated techniques that require advanced skills, while D, although potentially linked to a script kiddie's motivations, is less common for their profile.