In which step of the cyber-attack lifecycle do hackers embed intruder code within seemingly innocuous files?

The correct answer is A. weaponization. In the cyber-attack lifecycle (Kill Chain), the weaponization phase occurs after reconnaissance and before delivery. During weaponization, attackers take a vulnerability they have identified and craft a deliverable payload - this is precisely when malicious code (exploits…

Submitted by lars.no· Apr 18, 2026Cybersecurity Foundations

Question

Options

Aweaponization
Breconnaissance
Cexploitation
Ddelivery

How the community answered

(48 responses)

A
94% (45)
C
2% (1)
D
4% (2)

Explanation

In the cyber-attack lifecycle (Kill Chain), the weaponization phase occurs after reconnaissance and before delivery. During weaponization, attackers take a vulnerability they have identified and craft a deliverable payload - this is precisely when malicious code (exploits, malware, backdoors) is embedded into seemingly benign files such as PDFs, Office documents, or images. Option B (reconnaissance) is the information-gathering phase. Option D (delivery) is when the weaponized file is transmitted to the target (e.g., via phishing email). Option C (exploitation) is when the embedded code executes on the victim's system after the file is opened.

Topics

#cyber-attack lifecycle#weaponization#malware

Community Discussion

No community discussion yet for this question.

Full PCCET Practice