Exam CS0-001 topic 1 question 110 discussion

Guys please search the meaning again. APT: stealthy threat actor, which gains unauthorized access to a computer network and remains undetected for an extended period, they are persistent/only attacks one org at a time. But a opportunistic attack can still install new software to endpoints right? Even a penetration tester can do that, even I and you can do that c'mon. That is needed in post explotation phase. 0 day: a vuln even the vendors doesn't know about that is why its a zero day you will start counting from that day it is discovered, that is the reason why it is not detected by endpoint security. Please dont answer or base your judgement just because it asks for Threat and T from APT is Threat lol thats hilarious.

APT is correct

The key in this questions is "installation of new applications" which APT can do.

I think is zero day, APT normally runs for a long period without being Identified

I disagree here... An APT is typically described as an attack over time from foreign soil... which is possible here, but I think the MOST likely would be Zero Day based on the evidence given... Change my mind.