Ethical Hacking Essentials Practice Test

What type of threat arises from disgruntled employees who intentionally damage company networks?

1. Malicious insider

2. Negligent insider

3. Compromised insider

4. Insider threat

The correct answer is: Malicious insider

The scenario describes a threat that specifically involves current or former employees who have negative feelings toward the organization and may seek to harm it intentionally. This behavior characterizes a malicious insider, as this type of threat is typically driven by a motive to inflict damage or cause disruption. Malicious insiders leverage their access to the organization's systems, networks, or data to conduct harmful activities, whether through sabotage, theft, or data manipulation. While "insider threat" could broadly encompass any risk posed by internal actors, including negligent insiders who might cause unintentional harm through carelessness, the question explicitly emphasizes the intentional aspect which aligns with the malicious insider definition. Negligent insiders are typically those whose actions, although harmful, are not driven by ill will, but rather by a lack of awareness or care. A compromised insider refers to situations where an employee's credentials have been stolen or misused without the employee's knowledge, which does not fit the context of deliberate damage. Therefore, identifying this scenario as a malicious insider threat is accurate, as it reflects the intent behind the actions of disgruntled employees within the organization.