Which statements about an advanced persistent threat (APT) are supported by the material? Select ALL that apply.

### Why this is right - **It can involve prolonged network access without detection** is correct because an advanced persistent threat is described as prolonged access that goes unidentified. - **It can allow attackers to monitor traffic and access sensitive information** is correct because these are stated consequences of that access. - **It is one method of data theft** is correct because the material places this threat type under data theft. ### The concept An advanced persistent threat (APT) is a method in which a threat actor maintains access to a network over time without being identified. That extended access can enable monitoring, access to sensitive information, and theft. The term describes a prolonged pattern of access, not simply any isolated system observation. ### The other options - **D. It is defined as a single observable email event**: An email being sent is an example of an event, not the definition of an APT. ### Terms - **Advanced persistent threat (APT)**: A method of data theft involving prolonged, undetected network access that can enable monitoring and information theft. - **Threat actor**: A person or group responsible for, or attempting, harmful activity. ### Remember The defining clue for an APT is prolonged, undetected network access.