CRISC IT Risk Identification Practice Question
Which type of threat actor is characterized by having significant resources, advanced skills, and often state-sponsored objectives?
⚠ Common exam trap
The trap is equating 'significant resources and advanced skills' with organized crime; however, organized crime is financially motivated, while state-sponsored objectives are the key differentiator for nation-state APTs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Nation-state APTs
Nation-state advanced persistent threats (APTs) are characterized by significant resources, advanced technical skills, and objectives aligned with state interests, such as espionage, sabotage, or influence operations. They are typically well-funded and persistent.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Script kiddies
Why it's wrong here
Script kiddies use existing tools and exploits with limited skill and negligible resources, so they cannot mount state-sponsored campaigns. The term fits scenarios describing opportunistic, low-sophistication attacks by inexperienced individuals, not the advanced, well-funded actor the question describes.
- ✗
Organized crime
Why it's wrong here
Organised crime pursues financial gain through fraud and ransomware, lacking state sponsorship and the advanced persistent capability described. It would be the answer where the stem emphasises monetisation, criminal networks and profit-driven attacks rather than geopolitical objectives.
- ✓
Nation-state APTs
Why this is correct
Nation-state advanced persistent threats combine government funding, elite technical capability and geopolitical objectives, enabling prolonged intrusion campaigns that outmatch criminal or insider actors. This matches the stem's significant resources, advanced skills and state-sponsored objectives precisely.
- ✗
Hacktivists
Why it's wrong here
Hacktivists are driven by ideological or political protest, typically wielding modest resources and publicity-seeking tactics rather than sustained state-backed capability. They would be correct where the stem describes attacks motivated by social causes, not the significant resources and state sponsorship given here.
Go deeper
Related to this question
About these practice questions
One of 1,062 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISACA exam blueprint
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.