Josh has finished scanning a network and has discovered multiple vulnerable services. He knows that several of these usually have protections against external sources but are frequently susceptible to internal users. He decides to draft an email, spoof the sender as the internal IT team, and attach a malicious file disguised as a financial spreadsheet. Before Josh sends the email, he decides to investigate other methods of getting the file onto the system. For this particular attempt, what was the last stage of the cyber kill chain that Josh performed?

Question

Accepted Answer

D. Reconnaissance Reconnaissance is the information-gathering stage of the cyber kill chain and includes scanning the network and identifying vulnerable services, which Josh fully completed. His subsequent steps - drafting a phishing email and investigating other delivery methods - are described using the phrase 'decides to,' indicating planning intent rather than executed actions. Because no payload was created or delivered, Reconnaissance is the last stage Josh actually performed.

Answer

A. Exploitation Exploitation occurs after a payload has been delivered and a vulnerability is actively leveraged on the target system; Josh has not yet sent or delivered any payload.

Answer

B. Weaponization Weaponization involves actually building and packaging a malicious payload; Josh only decided to draft the email and attachment but paused to investigate other methods before executing this stage.

Answer

C. Delivery Delivery is the stage where the weaponized payload is transmitted to the victim; Josh explicitly stopped before sending the email, so this stage was never performed.

Josh has finished scanning a network and has discovered multiple vulnerable services. He knows that several of these usually have protections against external sources but are frequently susceptible…

Question

Options

How the community answered

Why each option

Topics

Community Discussion