Exam 312-50v13 topic 1 question 10 discussion

Weaponization

Weaponization

I changed my mind… Based on the vulnerabilities identified during analysis, the adversary selects or creates a tailored deliverable malicious payload (remote-access malware weapon) using an exploit and a backdoor to send it to the victim. For example, the adversary may send a phishing email to an employee of the target organization, which may include a malicious attachment such as a virus or worm that, when downloaded, installs a backdoor on the system that allows remote access to the adversary.

You ……are creating a client-side backdoor to send it to the employees via email. However, there is no “Delivery” option. Then I would suggest D. Exploitation. Exploitation After the weapon is transmitted to the intended victim, exploitation triggers the adversary’s malicious code to exploit a vulnerability in the operating system, application, or server on a target system. At this stage, the organization may face threats such as authentication and authorization attacks, arbitrary code execution, physical security threats, and security misconfiguration. Activities of the adversary include the following: o Exploiting software or hardware vulnerabilities to gain remote access to the target system

It's weaponization. The stage preparing tools after gathering enough information.

It is weaponization

B. Weaponization

B Weaponization is the correct option