A cyber attacker has initiated a series of activities against a high-profile organization following the Cyber Kill Chain Methodology. The attacker is presently in the "Delivery" stage. As an Ethical Hacker, you are trying to anticipate the adversary's next move. What is the most probable subsequent action from the attacker based on the Cyber Kill Chain Methodology?

Question

Accepted Answer

B. The attacker will exploit the malicious payload delivered to the target organization and establish a After a malicious payload has been successfully delivered to a target system, the next logical step in the Cyber Kill Chain is "Exploitation." This involves the attacker triggering the vulnerability the payload is designed to exploit, executing the malicious code, and gaining initial access or establishing a foothold within the target's environment.

Answer

A. The attacker will attempt to escalate privileges to gain complete control of the compromised Privilege escalation is typically a post-exploitation activity, occurring after initial access has been gained and a system is compromised, falling under stages like "Installation" or "Actions on Objectives."

Answer

C. The attacker will initiate an active connection to the target system to gather more data. Initiating an active connection to gather more data often describes activities within the "Command and Control" stage or ongoing reconnaissance, which occurs after exploitation and installation.

Answer

D. The attacker will start reconnaissance to gather as much information as possible about the target. Reconnaissance is the initial stage of the Cyber Kill Chain, occurring long before the "Delivery" stage to gather information about the target.

A cyber attacker has initiated a series of activities against a high-profile organization following the Cyber Kill Chain Methodology. The attacker is presently in the "Delivery" stage. As an Ethical…

Question

Options

How the community answered

Why each option

Topics

Community Discussion