1.1 Demonstrate Knowledge of the Cyber Kill Chain (e.g., Reconnaissance, Scanning, Enumeration, Gaining Access, Escalation of Privileges, Maintaining Access, Covering Tracks) and Recognize Intelligence Gaps CCFH Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   Which of the following best describes the primary purpose of the cyber kill chain model in understanding adversary operations?

   • ATo define the legal and ethical boundaries of cyber operations for nation-state actors
   • BTo describe the sequence of actions an adversary takes to achieve an objective, enabling defenders to identify and disrupt each stage
   • CTo categorize malware based on its behavior and persistence mechanisms
   • DTo provide a step-by-step guide for conducting penetration testing engagements
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   An intelligence analyst sees a report that an adversary has identified a specific employee's email address and social media profiles. Which phase of the kill chain does this information most directly support?

   • AWeaponization
   • BActions on Objectives
   • CDelivery
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
3. 18foundation · easy

   During the enumeration phase, which of the following is most likely to be discovered?

   • AThe IP address of a web server
   • BThe open ports on a firewall
   • CThe operating system of a host
   • DA list of valid usernames from an SMB share
   Reveal Solution Discussion Select an answer first