Cisco Certified Support Technician (CCST) CybersecurityNetwork SecurityMedium
A cybersecurity analyst is investigating a persistent threat actor that is using a variety of sophisticated techniques to compromise network defenses, including zero-day exploits and custom malware. The actor maintains a long-term presence within the network to exfiltrate sensitive data. Which term best describes this type of threat?
- ARansomware
- BDistributed Denial of Service (DDoS)
- CAdvanced Persistent Threat (APT)
- DPhishing Attack
Show answer & explanationAnswer & explanation
Correct answer: C. Advanced Persistent Threat (APT)
An Advanced Persistent Threat (APT) is a stealthy threat actor, typically a nation-state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period. APTs use sophisticated techniques and focus on long-term data exfiltration or sabotage.
Why the other options are wrong
- A. Ransomware encrypts data and demands payment, which is typically a short-term, high-impact event, not a persistent stealthy presence.
- B. DDoS attacks aim to overwhelm a system with traffic, not maintain a stealthy, long-term presence for data exfiltration.
- D. Phishing is a social engineering technique to acquire sensitive information, typically a precursor to other attacks, not the long-term threat itself.
Advanced Persistent Threat (APT)
A prolonged and targeted cyberattack where an intruder gains access to a network and stays there undetected for a significant period of time.
- Characterized by stealth, sophistication, and persistence.
- Often involves nation-states or state-sponsored groups.
- Primary goals are data exfiltration, espionage, or sabotage.
Memory trick: APTs Aim for Persistent Pillage.