1.4 Identify and Describe the Characteristics of an Advanced Persistent Threat (APT) CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization discovers that a server has been sending large amounts of data to an external IP address during off-peak hours. The data transfers have been occurring for several weeks. Which indicator of compromise (IoC) is most directly associated with this activity?

   • AReconnaissance
   • BData exfiltration
   • CPersistence mechanism
   • DPrivilege escalation
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A security team is analyzing a threat that has been operating in their network for eight months. The attackers use a combination of zero-day exploits, custom malware, and social engineering. They have specifically targeted the organization's research and development department. Which characteristic of an APT is most clearly demonstrated by the use of zero-day exploits?

   • ATargeted nature
   • BMotivation
   • CAdvanced techniques
   • DPersistence
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a key characteristic of an advanced persistent threat (APT)?

   • AIt is designed to achieve a specific objective against a particular target, often over a long period.
   • BIt is primarily focused on causing widespread disruption to critical infrastructure.
   • CIt relies on a single, highly sophisticated exploit that is used only once.
   • DIt uses only publicly available tools and techniques to avoid detection.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an example of an indicator of compromise (IoC) that might signal APT activity?

   • AA user accessing a frequently visited website
   • BA scheduled backup completing successfully
   • CA user receiving a routine email from a colleague
   • DA new administrator account created on a server without explanation
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which scenario best illustrates an advanced persistent threat (APT) rather than a conventional cyberattack?

   • AA hacker launches a distributed denial-of-service (DDoS) attack that overwhelms a company's website for a day.
   • BA ransomware worm encrypts files across a corporate network within hours, demanding payment.
   • CAn attacker exploits a known vulnerability in a public-facing web server and defaces the website.
   • DA competitor steals a company's trade secrets over several months by maintaining hidden access to its network.
   Reveal Solution Discussion Select an answer first