Skip to content

FRM Part II · FRM Exam Part II · Case Study: Cyberthreats and Information Security Risks

A mid-sized bank's security team observes a well-funded group that maintains undetected access to its payment-messaging network for many months, quietly mapping systems before acting. Which classification best describes this threat?

This is an advanced persistent threat. Such actors are well resourced, target specific institutions and keep covert access for long periods while mapping systems. Opportunistic scripts and DDoS floods are short, noisy or untargeted, so they do not fit prolonged stealthy presence.

  1. AOpportunistic script-based attack
  2. BAdvanced persistent threatCorrect
  3. CInsider error
  4. DDistributed denial-of-service campaign

Explanation

An advanced persistent threat is characterised by sophistication, resources and long-term stealthy access to a target. Opportunistic script attacks are generally untargeted and short-lived. A DDoS campaign is loud and aims to disrupt availability, not to remain hidden.

Did you get it right without looking?

One question tells you little. A timed set on Case Study: Cyberthreats and Information Security Risks shows your real accuracy, how long you take and where you lose marks.

Practise Case Study: Cyberthreats and Information Security RisksFree diagnostic mock

More Case Study: Cyberthreats and Information Security Risks questions