John, a professional hacker, performs a network attack on a renowned organization and gains unauthorized access to the target network. He remains in the network without being detected for a long…

Question

Options

• AAdvanced persistent theft
• Bthreat Diversion theft
• CSpear-phishing sites
• Dinsider threat

• A
  73% (27)
• B
  5% (2)
• C
  5% (2)
• D
  16% (6)

Explanation

Advanced Persistent Threat (APT)

Option A is correct because an Advanced Persistent Threat (APT) describes a sophisticated, long-term cyberattack where a hacker gains unauthorized access to a network, remains undetected for an extended period, and silently exfiltrates sensitive data without causing visible damage - which precisely matches John's actions. Option B ("Threat Diversion Theft") is not a recognized cybersecurity attack technique and is entirely fabricated as a distractor. Option C (Spear-phishing) refers specifically to targeted phishing emails used to gain initial access, not the sustained, covert operation described in the scenario. Option D (Insider Threat) involves an attack carried out by someone within the organization (employee, contractor), whereas John is an external hacker.

Memory Tip: Think of APT as a "ghost in the house" - the attacker breaks in quietly, lives there undetected for a long time, and steals valuables slowly without ever breaking anything. The key identifiers are: unauthorized access + long duration + undetected + data theft without destruction.

No community discussion yet for this question.