Ethical Hacking Essentials Practice Test

Who is identified as a malicious insider likely to damage network security intentionally?

1. Disgruntled employee

2. Negligent insider

3. Compromised insider

4. Professional insider

The correct answer is: Disgruntled employee

The identification of a malicious insider as a disgruntled employee is grounded in the understanding of motivations behind insider threats. Disgruntled employees often feel a sense of injustice, dissatisfaction with their job, or personal grievances against the organization. This discontent can drive them to intentionally engage in harmful activities, such as compromising sensitive data or undermining network security, because they believe it will retaliate against the organization or cause harm. In contrast, negligent insiders may cause security issues due to carelessness or lack of awareness, rather than with any malicious intent. Compromised insiders usually don't initiate harm themselves but may act under duress or influence from external threats, such as being coerced or manipulated by cybercriminals. Professional insiders, while knowledgeable about the system, are not inherently malicious unless they decide to exploit their expertise for nefarious purposes. Understanding these distinctions helps to clarify why a disgruntled employee is recognized as a malicious insider more clearly than the other types, who do not have a primary intent to cause intentional damage.