Exam 312-85 topic 1 question 16 discussion

C is not wrong, but it focuses more on the geographical or logistical aspects rather than the process-oriented nature of APTs. The nuanced distinction lies in the focus on stages (D) versus sources (C). I think D is a better answer.

Answer is C As per Module 02 Page 99 of CTIA Courseware

EC-Council Material reference for attack origination points They refer to numerous attempts done to gain entry to the target’s network. This point of entry can be used to gain access to the network and launch further attacks. To succeed in gaining initial access, the attacker needs to perform exhaustive research to identify the vulnerabilities and gatekeeper functions in the target network. Numbers Involved in the Attack It is defined as a number of host systems that are involved in the attack. APT attacks are usually carried out by a crime group or crime organization.

https://www.cimcor.com/blog/14-telltale-characteristics-of-an-advanced-persistent-threat Attack Origination Points Multiple attempts at gaining a point of entry may be launched to gain an initial presence within a network, though first attempts are typically sufficiently well-researched to be successful. Months of research can culminate in the full knowledge of your network's vulnerabilities as well as the human gatekeepers within your organization.