Cyber Kill Chain Methodology CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In the Cyber Kill Chain, which activity is an example of passive reconnaissance?

   • AScanning the target's network with a port scanner to identify open ports
   • BMonitoring public social media profiles of employees to gather information
   • CSending phishing emails to employees to test their awareness
   • DExploiting a vulnerability in the target's web server to gain access
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A penetration tester is preparing a client engagement. The client has asked the tester to simulate a targeted attack that uses a known vulnerability in a specific software version. The tester has identified the software version through passive reconnaissance. Which action best demonstrates the weaponization phase while staying within the engagement scope?

   • ACreate a malicious document that exploits the identified vulnerability
   • BSend the malicious document to the client's email address
   • CDocument the findings in a report
   • DScan the client's network for other vulnerabilities
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is tasked with simulating a targeted attack. The tester first identifies that the target uses a specific version of a PDF reader, then creates a malicious PDF that exploits a known vulnerability in that version. Which two phases are being performed?

   • AReconnaissance and Weaponization
   • BWeaponization and Delivery
   • CReconnaissance and Exploitation
   • DDelivery and Exploitation
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary goal of the weaponization phase in the Cyber Kill Chain?

   • ATo create a malicious payload tailored to exploit a specific vulnerability in the target
   • BTo gather information about the target's network and employees
   • CTo establish a command and control channel with the compromised system
   • DTo deliver the malicious payload to the target via email or USB
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of the Cyber Kill Chain methodology?

   • ATo provide a legal framework for prosecuting cyber criminals after an attack has occurred
   • BTo replace traditional antivirus software with a more advanced endpoint detection system
   • CTo describe the stages of a cyber attack from initial reconnaissance to completion of the attacker's objectives
   • DTo automatically block all malicious traffic before it reaches the network perimeter
   Reveal Solution Discussion Select an answer first