A security operations center (SOC) analyst notices a series of low-and-slow activities over several months. An attacker has been using legitimate credentials to access a file share, exfiltrating small amounts of data each time to avoid detection. The attacker has maintained access by creating a hidden local admin account. Which characteristic best identifies this as an Advanced Persistent Threat (APT)?

The attacker's persistence and stealth over a long period, using legitimate credentials and maintaining a hidden backdoor.

The fact that the attacker used credentials, which is the only way to access a file share.

The use of a known malware strain like a virus to infect the system.

The attacker's focus on a single file share, which is a common target for all attackers.

Which of the following is a defining characteristic of an Advanced Persistent Threat (APT)?

Short duration and immediate impact

Randomly targeting any available system

Using only publicly available exploit tools

Stealth and persistence over a long period

A financial services company is adopting threat modeling for a new payment processing platform. The CISO wants the threat model to directly demonstrate the business impact of a potential breach and to simulate realistic attack paths that an adversary would take, rather than just producing a list of generic threats. Which threat modeling methodology best aligns with this requirement?

PASTA (Process for Attack Simulation and Threat Analysis)

A simple data flow diagram review

Certified Secure Software Lifecycle Professional

Domain 4Objective 4

Perform Threat Modeling CSSLP Practice Questions (Page 3)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

11concepts

15%of the exam

Questions 11–15

11application · medium
A security operations center (SOC) analyst notices a series of low-and-slow activities over several months. An attacker has been using legitimate credentials to access a file share, exfiltrating small amounts of data each time to avoid detection. The attacker has maintained access by creating a hidden local admin account. Which characteristic best identifies this as an Advanced Persistent Threat (APT)?
Select an answer first
12foundation · easy
Which type of malware is disguised as a legitimate program but performs malicious actions when executed?
Select an answer first
13foundation · easy
Which of the following is a defining characteristic of an Advanced Persistent Threat (APT)?
Select an answer first
14application · medium
A financial services company is adopting threat modeling for a new payment processing platform. The CISO wants the threat model to directly demonstrate the business impact of a potential breach and to simulate realistic attack paths that an adversary would take, rather than just producing a list of generic threats. Which threat modeling methodology best aligns with this requirement?
Select an answer first
15foundation · easy
Which STRIDE category is primarily concerned with an attacker gaining higher privileges than they are authorized to have?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Perform Threat Modeling CSSLP Practice Questions (Page 3)

Questions 11–15

Which type of malware is disguised as a legitimate program but performs malicious actions when executed?

Which of the following is a defining characteristic of an Advanced Persistent Threat (APT)?

Which STRIDE category is primarily concerned with an attacker gaining higher privileges than they are authorized to have?

Keep studying — Secure Software Architecture and Design