The Cyber Kill Chain helps in determining the priority level of attacks by:

Question

Options

• AIdentifying the most expensive software vulnerabilities
• BHighlighting the most common types of malware
• CMapping out the stages of an attack from reconnaissance to actions on objectives
• DCalculating the potential financial loss from an attack

• A
  2% (1)
• B
  5% (2)
• C
  90% (37)
• D
  2% (1)

Explanation

Option C is correct because the Cyber Kill Chain, developed by Lockheed Martin, is a framework that models cyberattacks as a sequence of seven stages - reconnaissance, weaponization, delivery, exploitation, installation, command & control, and actions on objectives - allowing defenders to identify where in the chain an attack is and prioritize response accordingly.

Option A is wrong because the Kill Chain doesn't evaluate software cost or vulnerability pricing; that's more relevant to vulnerability management tools like CVSS scoring. Option B is wrong because cataloging common malware types is the domain of threat intelligence feeds and antivirus databases, not the Kill Chain framework. Option D is wrong because financial impact analysis belongs to risk assessment methodologies, such as quantitative risk analysis, not the Kill Chain.

Memory tip: Think of the Kill Chain as a "story of an attack" - it narrates every chapter from "the attacker scoping you out" to "mission accomplished," which is exactly what helps teams decide which chapter needs the most urgent response.

No community discussion yet for this question.