Cyber Threat Intelligence Analyst (CTIA) Practice Exam

The idea being tested is the ability of an attacker to stay hidden inside a target network for a long period while continuing to operate. This describes Advanced Persistent Threats: attackers gain initial access, establish a lasting foothold, and proceed with their objectives over months or even years, all while carefully avoiding detection. They use stealthy techniques to avoid raising alarms, slowly move through the environment, and exfiltrate data or observe operations over time. This is what sets APTs apart: the emphasis is on persistence and extended operation, not on quick, noisy actions. In contrast, botnets rely on many compromised devices to perform coordinated tasks, often in large volumes and with noticeable traffic patterns. Phishing uses social engineering to get initial access but doesn’t imply long-term stealth within a network. Denial of Service aims to disrupt services and is typically short, loud, and easily detectable.