1.4 Identify and Describe the Characteristics of an Advanced Persistent Threat (APT) CYBERSECURITY-PRACTITIONER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the typical first stage in the APT attack lifecycle?

   • AInitial compromise
   • BData exfiltration
   • CReconnaissance
   • DLateral movement
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which combination of traits is most typical of an advanced persistent threat (APT) actor?

   • AModerate skill, moderate resources, and a broad target set
   • BHigh skill, significant resources, and a specific high-value target
   • CLow skill, limited resources, and a random target
   • DHigh skill, but limited resources and a short-term goal
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a common indicator of compromise (IoC) associated with APT activity?

   • AUnexpected outbound data transfers during off-hours
   • BA user receiving a routine software update notification
   • CAn increase in legitimate network traffic during business hours
   • DA single failed login attempt from a legitimate user
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which type of organization is most likely to be a target of an advanced persistent threat (APT)?

   • AA personal blog with no sensitive data
   • BA government agency or defense contractor
   • CA local restaurant chain
   • DA small local retail store
   Reveal Solution Discussion Select an answer first
6. 5expert · hard · select all that apply

   A security team is investigating a potential APT. Which of the following are common indicators of compromise (IoCs) associated with APT activities? (Select all that apply.)

   • ALarge data transfers to external IP addresses during off-peak hours
   • BScheduled tasks that run PowerShell scripts
   • CAnomalous account activity, such as logins from impossible locations
   • DUnusual outbound network connections to known malicious domains
   • EPresence of legitimate administrative tools used by IT staff
   Check answers Discussion Select an answer first