EC-Council Certified Ethical Hacker (CEH) v12Information Security and Ethical Hacking OverviewHard
An advanced persistent threat (APT) group has successfully breached a defense contractor's network. After gaining initial access, they spend several months moving laterally across the network, escalating privileges, and exfiltrating highly sensitive intellectual property, all while meticulously avoiding detection. Which characteristic of an APT is best demonstrated by this behavior?
- AStealthy
- BLow Skill
- COpportunistic
- DVolatile
Show answer & explanationAnswer & explanation
Correct answer: A. Stealthy
APTs are characterized by their stealth, persistence, and sophisticated techniques to remain undetected within a target network for extended periods. The phrase 'meticulously avoiding detection' directly points to the stealthy nature of the attack.
Why the other options are wrong
- B. APTs are known for their high skill and sophisticated methods, not low skill.
- C. Opportunistic attacks target easily found vulnerabilities, whereas APTs are highly targeted and patient.
- D. Volatile attacks are quickly executed and often easily detected, which is contrary to the long-term, undetected nature of an APT.
Advanced Persistent Threat (APT)
A sophisticated, prolonged cyberattack campaign where an intruder establishes an illicit presence on a network to steal data over an extended period. APTs are characterized by their stealth, persistence, and highly targeted nature.
- Highly targeted and patient.
- Operates covertly for long periods (stealthy).
- Uses sophisticated tools and techniques.
- Often sponsored by nation-states or large organizations.
- Primary goal is data exfiltration or espionage.
Memory trick: APTs are Advanced, Persistent, and Stealthy.