In this phase, an attacker aims to gain access to a resource that can be used for performing further attacks or financial gain.

In this phase, an attacker aims to gain access to a resource that can be used for performing further attacks or financial gain.

• A. Search and Exfiltration
• B. Discovery
• C. Propagation
• D. Privilege Escalation

Answer: (A)

The idea being tested is locating a valuable asset or resource and using it as a foothold for further actions or profit. In this phase, an attacker looks for a resource that can be accessed and leveraged to enable later attacks or to monetize the breach, such as exfiltrating data or using the resource to pivot to more valuable targets. This combines identifying where data or assets reside with the intent to extract or deploy that access for ongoing abuse. Why this fits best: the emphasis is on finding something of value within the compromised environment and preparing to exploit it for additional gains, not just mapping the network, escalating privileges, or moving to other systems without that immediate payoff. Why the others don’t fit as well: Discovery focuses on identifying what exists rather than exploiting a resource for future attacks or financial gain. Propagation describes spreading to other systems, not specifically securing a resource for ongoing use. Privilege escalation is about increasing permissions on a system, a different objective from obtaining a resource that enables further actions or monetization.

The idea being tested is locating a valuable asset or resource and using it as a foothold for further actions or profit. In this phase, an attacker looks for a resource that can be accessed and leveraged to enable later attacks or to monetize the breach, such as exfiltrating data or using the resource to pivot to more valuable targets. This combines identifying where data or assets reside with the intent to extract or deploy that access for ongoing abuse.

Why this fits best: the emphasis is on finding something of value within the compromised environment and preparing to exploit it for additional gains, not just mapping the network, escalating privileges, or moving to other systems without that immediate payoff.

Why the others don’t fit as well: Discovery focuses on identifying what exists rather than exploiting a resource for future attacks or financial gain. Propagation describes spreading to other systems, not specifically securing a resource for ongoing use. Privilege escalation is about increasing permissions on a system, a different objective from obtaining a resource that enables further actions or monetization.