Which of the following is NOT listed as one of the seven steps in the Cyber Kill Chain described?

Which of the following is NOT listed as one of the seven steps in the Cyber Kill Chain described?

• A. Reconnaissance
• B. Exfiltration
• C. Installation
• D. Actions on Objectives

Answer: (B)

The Cyber Kill Chain maps the attacker’s progression through seven distinct stages: Reconnaissance (gathering information about the target), Weaponization (preparing the exploit and payload), Delivery (bringing the payload to the target), Exploitation (taking advantage of a vulnerability), Installation (establishing malware on the system), Command and Control (opening a channel to control the compromised host), and Actions on Objectives (carrying out the attacker’s goals, such as data access or theft). Exfiltration is not listed as its own separate stage in this model; data exfiltration is typically carried out during the Actions on Objectives phase, or treated as a goal rather than a separate step. So, Exfiltration isn’t one of the seven stages, while Reconnaissance, Installation, and Actions on Objectives are.

The Cyber Kill Chain maps the attacker’s progression through seven distinct stages: Reconnaissance (gathering information about the target), Weaponization (preparing the exploit and payload), Delivery (bringing the payload to the target), Exploitation (taking advantage of a vulnerability), Installation (establishing malware on the system), Command and Control (opening a channel to control the compromised host), and Actions on Objectives (carrying out the attacker’s goals, such as data access or theft). Exfiltration is not listed as its own separate stage in this model; data exfiltration is typically carried out during the Actions on Objectives phase, or treated as a goal rather than a separate step. So, Exfiltration isn’t one of the seven stages, while Reconnaissance, Installation, and Actions on Objectives are.