Josh has finished scanning a network and has discovered multiple vulnerable services. He knows that several of these usually have protections against external sources but are frequently susceptible to internal users. He decides to draft an email, spoof the sender as the internal IT team, and attach a malicious file disguised as a financial spreadsheet. Before Josh sends the email, he decides to investigate other methods of getting the file onto the system. For this particular attempt, what was the last stage of the cyber kill chain that Josh performed?

Question

Accepted Answer

B. Weaponization The Weaponization stage involves pairing an exploit with a backdoor or payload into a deliverable package, such as a malicious email attachment. In this scenario, Josh crafted the email and attached the malicious file, creating the weapon, but had not yet delivered it to the target.

Answer

A. Exploitation Exploitation is the act of triggering the vulnerability and gaining access to the system, which occurs after successful delivery.

Answer

C. Delivery Delivery is the transmission of the weapon (the malicious email) to the target, which Josh has not yet done.

Answer

D. Reconnaissance Reconnaissance involves gathering information about the target, which Josh completed earlier by scanning the network and discovering vulnerabilities.

Josh has finished scanning a network and has discovered multiple vulnerable services. He knows that several of these usually have protections against external sources but are frequently susceptible to

Question

Options

How the community answered

Why each option

Topics

Community Discussion