Which of the following BEST protects against emerging advanced persistent threat (APT) actors?

Question

Options

• AUpdated security awareness materials
• BProactive monitoring
• CHoneypot environment
• DOngoing incident response training

• A
  8% (3)
• B
  77% (30)
• C
  3% (1)
• D
  13% (5)

Explanation

Proactive monitoring (B) is the best defense against APTs because these sophisticated, long-term threat actors rely on stealth and persistence - continuous, real-time visibility into network behavior, anomalies, and indicators of compromise is the primary mechanism for detecting and disrupting them before significant damage occurs.

Why the distractors fall short:

• A (Security awareness materials) - useful for phishing prevention but static training doesn't adapt fast enough to the evolving TTPs of APT groups.
• C (Honeypot environment) - can attract and study attackers, but it's a passive, reactive tool and doesn't actively protect production systems or detect active intrusions elsewhere.
• D (Incident response training) - prepares the team to react after a breach is discovered, but APTs succeed precisely because they go undetected for months; IR training doesn't prevent that.

Memory tip: Think "APT = Always Present Threat." Because APTs linger silently, you need eyes that are always present too - that's proactive monitoring. Any answer that is reactive (training, response) or passive (honeypot) loses to the one that actively watches.

No community discussion yet for this question.