CompTIA CySA+ (CS0-003) — Question 388

A security analyst discovers that, over three months, an attacker has slowly created multiple accounts on a web server while avoiding detection. Which of the following best describes this threat actor?

Answer options

• A. Script kiddie threat actor
• B. Advanced persistent threat actor
• C. Insider threat actor
• D. Hacktivist threat actor

Correct answer: B

Explanation

The correct answer is B, as an Advanced Persistent Threat (APT) actor is characterized by their stealthy and prolonged approach to infiltrating systems and maintaining access. The other options do not accurately reflect this method; a Script kiddie typically uses pre-made scripts with less sophistication, an Insider threat actor originates from within the organization, and a Hacktivist is motivated by political or social causes rather than stealthy infiltration.