Unless a computer system holds a particular interest, the most likely threat comes from:

• A. Nation-states
• B. Insiders
• C. Professional hackers
• D. Script kiddies

Answer: (D)

The likelihood of an attack is driven by who can and will attack a wide range of systems, not just highly targeted ones. Script kiddies are opportunistic attackers who use readily available tools and automated exploits to probe thousands of systems for easy weaknesses. Because they don’t need a specific target or advanced skills, they generate a large volume of incidents against generic or poorly secured systems. In contrast, nation-states tend to pursue high-value, targeted targets; insiders require legitimate access or support from within; professional hackers are skilled and capable but fewer in number and often focus on specific goals. So, for a system that isn’t of particular interest, the most probable threat comes from these broad, opportunistic attackers using common weaknesses, i.e., script kiddies.