CompTIA CySA+ Practice Test

What is a primary goal of an attacker using an Advanced Persistent Threat (APT)?

1. To inflict maximum damage to the network

2. To steal sensitive information undetected over time

3. To disrupt services for ransom

4. To execute malware across multiple environments

The correct answer is: To steal sensitive information undetected over time

A primary goal of an Advanced Persistent Threat (APT) is to steal sensitive information undetected over a prolonged period. APTs are characterized by their stealthy and methodical approach; attackers typically gain access to a target's network and remain persistently present to gather intelligence or data without raising alarms. The essence of an APT is not just to breach a system but to capture valuable information while maintaining a low profile. This allows attackers to monitor their targets, extract sensitive data, and potentially understand the organization's processes and vulnerabilities before making a more significant move. While inflicting maximum damage, disrupting services for ransom, or executing malware across multiple environments might be goals of other types of attacks, they do not align with the strategic methodology of APTs, which focus on long-term infiltration and data exfiltration rather than immediate and overt destruction.