フリー問題

問題文

A security lead is told that the organization is facing an advanced persistent threat rather than opportunistic crime. Which characteristics belong to an advanced persistent threat? (Select two.)

選択肢

1. The adversary attacks whichever hosts happen to be reachable.
2. The adversary always relies on a single previously unknown software flaw, and the campaign stops as soon as that flaw is fixed by the vendor, which is why patching alone is a complete answer to this class of threat.
3. The adversary's aim is to maximize immediate disruption so that the victim notices at once.
4. The adversary selects a specific target and pursues objectives against it over an extended period.
5. The adversary works to stay undetected, because remaining inside is itself part of the objective.