Which of the following is identified as a threat to IT systems today and appears in the Threats list?

• A. Nation-State Actors
• B. Insiders
• C. Botnets
• D. Malicious Code

Answer: (C)

Botnets represent a threat where a network of compromised devices is controlled by an attacker to carry out coordinated actions. They appear in threat catalogs because they’re a concrete, widely used method for real-world attacks, enabling large-scale DDoS, spam, data theft, and other malicious activities. The strength of botnets is their scale: thousands of machines can be directed from a single command-and-control center, making detection and mitigation more challenging and increasing the potential impact on organizations.

Other options are real threats as well, but they describe different concepts: nation-state actors are a category of attacker groups, insiders are threats originating from trusted users within an organization, and malicious code is a broad category that includes various types of malware. Botnets, by contrast, epitomize a specific, widely recognized threat mechanism that consistently shows up in threat lists. To defend against them, focus on robust endpoint protection, network monitoring for unusual outbound traffic, timely patching, and segmentation to limit lateral movement.