Which technique is considered active reconnaissance?

Reviewing the target's job postings to infer technology stack

Using a port scanner to identify open ports on the target's firewall

Checking the target's DNS records using public databases

Searching the target company's annual report for employee names

Which method is commonly used in the delivery phase of the Cyber Kill Chain?

Email attachment containing a malicious macro-enabled document

Encrypting data on the target's hard drive for ransom

Installing a rootkit to hide malicious processes

Exploiting a buffer overflow in a web server application

EC-CouncilCertified Ethical Hacker

Domain 1Objective 5

Cyber Kill Chain Methodology CEH Practice Questions (Page 7)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

9concepts

Questions 31–35

31application · medium
A user clicks a link in a phishing email that leads to a website exploiting a browser vulnerability. The exploit runs a script that downloads and executes a remote access trojan. At which phase of the Cyber Kill Chain does the browser vulnerability exploitation occur?
Select an answer first
32application · medium
An organization is reviewing its defenses against malware delivered via email attachments. Which Cyber Kill Chain phase is the organization trying to disrupt by implementing attachment sandboxing and email content filtering?
Select an answer first
33application · medium
A security administrator is implementing endpoint detection and response (EDR) software that monitors for unusual process behavior, such as a document reader spawning a command shell. Which phase of the Cyber Kill Chain is this control primarily designed to detect?
Select an answer first
34foundation · easy
Which technique is considered active reconnaissance?
Select an answer first
35foundation · easy
Which method is commonly used in the delivery phase of the Cyber Kill Chain?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Cyber Kill Chain Methodology CEH Practice Questions (Page 7)

Questions 31–35

A user clicks a link in a phishing email that leads to a website exploiting a browser vulnerability. The exploit runs a script that downloads and executes a remote access trojan. At which phase of the Cyber Kill Chain does the browser vulnerability exploitation occur?

An organization is reviewing its defenses against malware delivered via email attachments. Which Cyber Kill Chain phase is the organization trying to disrupt by implementing attachment sandboxing and email content filtering?

A security administrator is implementing endpoint detection and response (EDR) software that monitors for unusual process behavior, such as a document reader spawning a command shell. Which phase of the Cyber Kill Chain is this control primarily designed to detect?

Which technique is considered active reconnaissance?

Which method is commonly used in the delivery phase of the Cyber Kill Chain?

Keep studying — Information Security and Ethical Hacking Overview