What is the primary goal of the 'Exploitation' stage in the Cyber Kill Chain?

Question

Options

• ATo deliver a malicious payload
• BTo identify potential vulnerabilities
• CTo gain access to the target system or network
• DTo steal data

• A
  7% (4)
• B
  4% (2)
• C
  87% (48)
• D
  2% (1)

Explanation

Gaining access (C) is the primary goal of the Exploitation stage because this is the moment the attacker actively triggers a vulnerability to execute code or commands on the target system - crossing the threshold from having a weapon to using it.

• A (deliver payload) describes the preceding Delivery stage, where the weapon (e.g., a phishing email) is transmitted to the target - before exploitation occurs.
• B (identify vulnerabilities) belongs to the Reconnaissance stage, which happens much earlier in the chain.
• D (steal data) is an outcome that may follow exploitation, but it maps to the Actions on Objectives stage - the final phase of the kill chain.

Memory tip: Think of the kill chain stages as a break-in analogy - Delivery is throwing a rock at the window, Exploitation is the moment the window breaks and you climb through. You're not stealing anything yet; you've just gained access.

No community discussion yet for this question.