An insider who uses technical knowledge to identify network weaknesses and sells confidential information is best described as a ...

• A. Compromised Insider
• B. Negligent Insider
• C. Professional Insider
• D. Malicious Insider

Answer: (C)

This question looks at insider threat categories by combining skill level with intent. An insider who uses technical knowledge to identify network weaknesses shows a high level of capability and methodical approach to exploiting systems. Selling confidential information adds a business-like, profit-driven motive. Put together, this describes someone who treats the activity as a professional pursuit, not just a one-off or incidental action. So the best fit is a Professional Insider.

This differs from a compromised insider (someone’s credentials or access have been hijacked), a negligent insider (carelessness leading to exposure), or a malicious insider (intent to harm) without necessarily highlighting the professional, trade-like nature of the activity. The emphasis here is on skilled, purposeful exploitation and monetization, which is why Professional Insider is the most accurate label.