A network administrator is preparing answers for an annual risk assessment that is required for compliance
purposes. Which of the following would be an example of an internal threat?


A. An approved vendor with on-site offices
B. An infected client that pulls reports from the firm
C. A malicious attacker from within the same country
D. A malicious attacker attempting to socially engineer access into corporate offices