A Security Analyst Is Attempting to Utilize the Following Threat

question 82

Multiple Choice

A security analyst is attempting to utilize the following threat intelligence for developing detection capabilities: APT X's approach to a target would be sending a phishing email to the target after conducting active and passive reconnaissance. Upon successful compromise, APT X conducts internal reconnaissance and attempts to move laterally by utilizing existing resources. When APT X finds data that aligns to its objectives, it stages and then exfiltrates data sets in sizes that can range from 1GB to 5GB. APT X also establishes several backdoors to maintain a C2 presence in the environment. In which of the following phases in this APT MOST likely to leave discoverable artifacts?

• A) Data collection/exfiltration
• B) Defensive evasion
• C) Lateral movement
• D) Reconnaissance

---

Definitions:

Papillae

Small projections on the tongue that contain taste buds, which are responsible for detecting taste.

Nerve Hearing Impairment

Hearing loss caused by damage to the auditory nerve or the cochlea, affecting the transmission of sound signals to the brain.

Tinnitus

A condition characterized by hearing ringing, buzzing, or other sounds in the ears or head when no external sound is present, often a symptom of underlying issues.

Taste Receptors

Taste receptors are specialized sensory cells located on the tongue that enable the perception of different tastes, such as sweet, salty, bitter, and sour.