Drag and Drop Question Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model. Answer:

The correct answer is reconnaissance; weaponization; delivery. The Cyber Kill Chain model, developed by Lockheed Martin, defines sequential phases of a cyberattack. Reconnaissance is correctly matched to 'identification and selection of targets' because this is the initial intelligence-gathering phase where adversaries research potential…

Submitted by carlos_mx· Mar 6, 2026CompTIA CySA+ / Security+ - Threat and Vulnerability Management: Understanding attack frameworks and threat actor methodology using the Cyber Kill Chain model

Question

Drag and Drop Question Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model. Answer:

Exhibit

Answer Area

Drag items

The threat actor engages in identification and selection of targets.An exploit is coupled with a remote access trojan.The weapon is transferred to the target environment.

Correct arrangement

reconnaissance
weaponization
delivery

Explanation

The Cyber Kill Chain model, developed by Lockheed Martin, defines sequential phases of a cyberattack. Reconnaissance is correctly matched to 'identification and selection of targets' because this is the initial intelligence-gathering phase where adversaries research potential victims. Weaponization is correctly matched to 'coupling an exploit with a remote access trojan' because this phase involves creating a deliverable payload (weapon) by pairing malicious code with an exploit. Delivery is correctly matched to 'transferring the weapon to the target environment' because this phase represents the transmission of the weapon to the victim via vectors such as email, web, or USB.

Topics

#Cyber Kill Chain#Threat Intelligence#Intrusion Analysis#Attack Lifecycle

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice