A security analyst discovers that, over three months, an attacker has slowly created multiple accounts on a web server while avoiding detection. Which of the following best describes this threat…

Question

Options

• AScript kiddie threat actor
• BAdvanced persistent threat actor
• CInsider threat actor
• DHacktivist threat actor

• A
  19% (8)
• B
  71% (30)
• C
  2% (1)
• D
  7% (3)

Explanation

Advanced Persistent Threat (APT) Explanation

Option B is correct because an Advanced Persistent Threat (APT) actor is characterized by their patience, stealth, and long-term presence in a target environment - exactly what is demonstrated by slowly creating accounts over three months while evading detection. APTs are typically well-resourced, sophisticated attackers who prioritize remaining undetected to achieve strategic goals.

Why the distractors are wrong:

• Script kiddies (A) are unskilled attackers who use pre-made tools and act impulsively - they lack the sophistication or patience for a slow, methodical attack
• Insider threats (C) are individuals already inside the organization (employees, contractors), whereas this scenario describes an external attacker
• Hacktivists (D) are motivated by ideology or political causes and typically seek attention through loud, disruptive attacks - the opposite of staying hidden

Memory Tip: Think of APT as "A Patient Threat" - the key indicators are sophistication, stealth, and time. Whenever you see an exam question describing a slow, deliberate, long-term attack designed to avoid detection, think APT.

No community discussion yet for this question.