Cyber Kill Chain Methodology CEH Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   During a security review, an analyst notices that an attacker has established a persistent backdoor and is communicating with an external server. Which two phases of the Cyber Kill Chain are most directly involved?

   • AWeaponization and delivery
   • BReconnaissance and exploitation
   • CInstallation and command and control
   • DActions on objectives and delivery
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What occurs during the exploitation phase of the Cyber Kill Chain?

   • AThe attacker sends a phishing email to the target
   • BThe attacker triggers a vulnerability to execute code on the target system
   • CThe attacker gathers information about the target's employees
   • DThe attacker establishes a command and control channel
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which activity is an example of 'actions on objectives' in the Cyber Kill Chain?

   • AScanning the target's network for vulnerabilities
   • BExfiltrating sensitive customer data from a compromised database
   • CSending a phishing email to an employee
   • DEstablishing a command and control channel
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A penetration test is being planned. The tester has identified a vulnerability in a web application that requires user interaction to trigger. The tester wants to demonstrate the full kill chain from delivery to installation. Which approach best achieves this while minimizing the risk of disrupting production?

   • AUse a USB drop attack to deliver the exploit and then manually exploit the vulnerability
   • BDirectly exploit the vulnerability using a script without user interaction
   • CExploit the vulnerability and immediately exfiltrate data without installing persistence
   • DSend a phishing email to a test user with a link to the exploit, then use the resulting shell to install a persistence mechanism
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security architect is designing defenses for a high-security environment. The organization is concerned about advanced persistent threats (APTs) that use zero-day exploits and custom malware. The architect must choose a primary defense strategy. Which strategy is most effective against APTs that bypass traditional signature-based defenses?

   • AImplementing a zero-trust architecture with micro-segmentation
   • BRelying on up-to-date antivirus signatures
   • CConducting regular penetration tests
   • DDeploying a web application firewall (WAF) at the perimeter
   Reveal Solution Discussion Select an answer first