Which feature differentiates Advanced Persistent Threats from opportunistic attacks?

• A. Single Point of Entry
• B. Rapid Exploitation
• C. Long-Term Presence With Tailored Exploitation
• D. High-Volume Data Exfiltration

Answer: (C)

The key idea is that Advanced Persistent Threats are defined by a sustained, targeted campaign that stays undetected in a victim’s environment for a long time, using customized tools and techniques tailored to that environment. This combination—long-term foothold plus exploitation that's adapted to the specific system—lets the attacker steadily gather intelligence, move laterally, and exfiltrate data over months or years without obvious disruption. That is exactly what “Long-Term Presence With Tailored Exploitation” describes.

In practical terms, an APT operator invests in stealth, persistence, and customization—finding ways to maintain access, avoid detection, and tailor malware and attack steps to the target’s signals, networks, and defenses. Opportunistic attacks, by contrast, aim for quick, broad access and rapid payoff, often using generic tools and exploiting common vulnerabilities without maintaining a prolonged, customized presence.

Why the other ideas aren’t the defining difference: having a single point of entry can occur in both types of attacks, and rapid exploitation is characteristic of opportunistic campaigns rather than APTs. High-volume data exfiltration isn’t what sets APTs apart—the emphasis is on staying hidden and persistent long enough to achieve strategic objectives, not simply moving large amounts of data quickly.