1.4 Identify and Describe the Characteristics of an Advanced Persistent Threat (APT) CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A utility company that manages the power grid for a large city has detected a sophisticated intrusion that has been dormant for months but recently activated to send commands to industrial control systems. The attackers appear to have deep knowledge of the control systems' protocols. Which type of target is this APT most likely pursuing?

   • AFinancial institutions for monetary theft
   • BCritical infrastructure for disruption
   • CRetail companies for credit card data
   • DHealthcare organizations for patient records
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A security analyst is comparing two incidents. In Incident A, a worm spreads rapidly across the internet, infecting thousands of systems in a day. In Incident B, a targeted group of employees at a research lab receives spear-phishing emails, and the attacker slowly moves through the network over several months. Which characteristic is present in Incident B but NOT in Incident A?

   • AUse of malware
   • BTargeted nature
   • CExploitation of vulnerabilities
   • DNetwork propagation
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement best defines an advanced persistent threat (APT)?

   • AA prolonged, targeted cyberattack in which an intruder gains access to a network and remains undetected for an extended period.
   • BAn automated attack that uses artificial intelligence to adapt its behavior in real time to evade detection.
   • CA short-lived, opportunistic attack that exploits a single vulnerability to achieve immediate impact.
   • DA type of malware that spreads rapidly across the internet without requiring any user interaction.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   In an APT investigation, analysts discover that the attackers have been using a legitimate cloud storage service to upload stolen data in small, encrypted chunks to avoid detection. Which APT lifecycle stage does this activity represent?

   • AData exfiltration
   • BLateral movement
   • CPersistence
   • DReconnaissance
   Reveal Solution Discussion Select an answer first