Cyber Kill Chain Methodology CEH Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company wants to reduce the risk of spear-phishing attacks that use publicly available employee information. Which two Cyber Kill Chain phases should the company focus on to most directly mitigate this threat?

   • AActions on Objectives and Installation
   • BReconnaissance and Delivery
   • CWeaponization and Exploitation
   • DInstallation and Command and Control
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security team is investigating a breach where the attacker used a SQL injection vulnerability to gain access to a database, then used the database credentials to access other systems, and finally encrypted the entire database and demanded a ransom. The team wants to implement controls to prevent this from happening again. Which control would be most effective in preventing the initial compromise?

   • AImplementing network segmentation to limit lateral movement
   • BConducting regular vulnerability scans and patching
   • CDeploying endpoint detection and response (EDR) on all servers
   • DImplementing a web application firewall (WAF) with SQL injection rules
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the purpose of the command and control (C2) phase in the Cyber Kill Chain?

   • ATo exploit a vulnerability in the target system
   • BTo gather information about the target's employees
   • CTo establish a communication channel between the attacker and the compromised system
   • DTo deliver the malicious payload to the target
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   In a scenario where an attacker sends a spear-phishing email with a malicious link, which phase of the Cyber Kill Chain is being executed?

   • AWeaponization
   • BDelivery
   • CReconnaissance
   • DExploitation
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which action is typical of the installation phase?

   • ASending a phishing email with a malicious attachment
   • BEncrypting files on the target's system for ransom
   • CScanning the target's network for open ports
   • DCreating a scheduled task that runs a remote access tool at system startup
   Reveal Solution Discussion Select an answer first