Threats, Vulnerabilities & Mitigations
122 practice questions with explanations — 15 free to try
3 of these 122 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 122 CompTIA Security+ practice questions on Threats, Vulnerabilities & Mitigations, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Threats, Vulnerabilities & Mitigations: example questions & answers
3 worked examples with answers and explanations below. Try 15 CompTIA Security+ questions free in the browser; the full 122-question Threats, Vulnerabilities & Mitigations bank is part of PassNova Premium.
When classifying threat actors, what does the internal/external attribute describe?
- AWhether the attack targets on-premises or cloud systems
- BWhether the actor is based in the same country
- CWhether the actor already has authorised access✓
- DWhether the attack uses custom or public tools
Answer: An internal actor, such as an employee, contractor or partner, starts with legitimate access and knowledge of the environment, whereas an external actor must first gain entry. Location and target platform describe other things, and tooling relates to the sophistication/capability attribute.
Which threat actor is motivated by political or social causes?
- AOrganized crime
- BHacktivist✓
- CAPT group
- DInsider
Answer: Hacktivists are driven by political or social causes rather than profit.
An actor quietly steals a competitor's product designs over several months and passes them to a rival firm. Which motivation does this show?
- AService disruption
- BRevenge
- CBlackmail
- DEspionage✓
Answer: Espionage is the covert gathering of information for competitive, political or military advantage, so the actor prizes staying undetected. Blackmail threatens to expose or withhold data for payment, revenge targets a victim out of grievance, and service disruption aims to take systems down.