Question

A security administrator has uncovered a covert channel used to exfiltrate confidential data from an internal database server through a compromised corporate web server. Ongoing exfiltration is accomplished by embedding a small amount of data extracted from the database into the metadata of images served by the web server. File timestamps suggest that the server was initially compromised six months ago using a common server misconfiguration.

Which of the following BEST describes the type of threat being used?

(choose one and why)

A. APT
B. Zero-day attack
C. Man-in-the-middle attack

D. XSS

Answer 1

Solution

Explanation

APT means Advanced Persistent Threat

It is a prolonged and targeted security attack

Intruders or hackers access a network and remains undetected for an extended period of ime

the main goal of APT attack is monitor network activity and steal data rather than cause damage to network or company

from the question we can clearly understand it is an APT attack

because data was extracted from the server

server was compromised six months ago so it remains undetected for certain period of time

--

all the best