210-255 · Question #77
Which of the following steps in the kill chain would come before the others?
The correct answer is B. Delivery. The Cyber Kill Chain defines a strict sequence of attacker phases, and Delivery precedes Exploitation, Installation, and C2.
Question
Which of the following steps in the kill chain would come before the others?
Options
- AC2
- BDelivery
- CInstallation
- DExploitation
How the community answered
(21 responses)- B90% (19)
- C5% (1)
- D5% (1)
Why each option
The Cyber Kill Chain defines a strict sequence of attacker phases, and Delivery precedes Exploitation, Installation, and C2.
Command and Control (C2) is step 6 in the kill chain, occurring after Delivery, Exploitation, and Installation have all been completed.
In the Lockheed Martin Cyber Kill Chain, Delivery is step 3 - the phase where the attacker transmits the weaponized payload to the target environment. This must occur before Exploitation (step 4), Installation (step 5), and Command and Control (step 6), because without successfully delivering the weapon, none of the subsequent phases can begin.
Installation is step 5, and it requires that Delivery (step 3) and Exploitation (step 4) have already occurred.
Exploitation is step 4, which occurs after Delivery (step 3) but still after the answer choices C and A in sequence.
Concept tested: Cyber Kill Chain phase ordering and sequencing
Source: https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html
Topics
Community Discussion
No community discussion yet for this question.