Exam 312-50v11 topic 1 question 151 discussion

B is the correct answer. Reference: https://www.logsign.com/blog/7-steps-of-cyber-kill-chain/#:~:text=The%20Cyber%20Kill%20Chain%20consists%20of%207%20steps%3A%20Reconnaissance%2C%20weaponization,attacker%20%2F%20intruder%20chooses%20their%20target.

Actions on Objectives The adversary controls the victim’s system from a remote location and finally accomplishes their intended goals. The adversary gains access to confidential data, disrupts the services or network, or destroys the operational capability of the target by gaining access to its network and compromising more systems. Also, the adversary may use this as a launching point to perform other attacks. (P.32/16)

The adversary creates a command and control channel, which establishes two-way communication between the victim’s system and adversary-controlled server to communicate and pass data back and forth. The adversaries implement techniques such as encryption to hide the presence of such channels. Using this channel, the adversary performs remote exploitation on the target system or network

Command and Control EC-Council's CEH book pg 26 The adversary creates a command and control channel, which establishes two-way communication between the victim’s system and adversary-controlled server to communicate and pass data back and forth. The adversaries implement techniques such as encryption to hide the presence of such channels. Using this channel, the adversary performs remote exploitation on the target system or network

Actions on objectives (AOO) is the final stage of the Cyber Kill Chain, where the attacker achieves their ultimate objective. This could involve data theft, sabotage, or any other goal that the attacker had in mind when they initiated the attack. Command and Control (C2), on the other hand, is an earlier stage in the Cyber Kill Chain, where the attacker establishes communication with the compromised system or network to gain control and issue commands to carry out the attack. The C2 stage often involves the use of malware or other forms of malicious software to gain access to the targeted system or network.

Actions on objectives

Actions on Objective: Intruder takes action to achieve their goals, such as data exfiltration, data destruction, or encryption for ransom. answer is correct

Correct

Actions and Objectives

Action on objective is the correct answer. Think about it - every attack has it purpose - to encrypt data, to steal/exfiltrate data. No one is attacking only to establish command and control. So the "objective" is to steal the data

Command and control

Actions on Objective: Once the attacker / intruder gains persistent access, they finally take action to fullfil their purpose, such as encryption for ransom, data exfiltration or even data destruction.

correct